sfdc-3d0u2f.mta.salesforce.com. AXFR zone transfer

Zone transfer refused The zone transfer was refused by the DNS server.
That's a security best practice.
check IXFR