You could do soft validation that provides protection for common mistakes while still allowing users to use domains you didn't expect.

"Did you mean [email protected] instead of layer8@gmailc0m [Y][N]".