No need to be malicious unless you're sure. A common mistake not to keep A records updated for domains sitting disused.

Perhaps, just redirect to a non locally hosted neutral page saying something like "The domain you requested was redirected to an invalid server. The reason for this is not clear."

I'd not like a redirect on my server sending people to something deliberately offensive; that reflects on me.