If someone configured a rule to point one domain to another domain and then forgot about it, the only way to solve the problem is to constantly review all of the DNS records in an organization.
In this case, we recommend using RiskIQ to monitor any changes in your infrastructure.