The error may differ if the zone is signed with DNSSEC.
NXDOMAIN is a valid response that won't pass a signature verification.
REFUSED just means that DNS Server can't or won't provide a response at this time.
NXDOMAIN is a valid response that won't pass a signature verification.
REFUSED just means that DNS Server can't or won't provide a response at this time.