You could do soft validation that provides protection for common mistakes while still allowing users to use domains you didn't expect.

"Did you mean layer8@gmail.com instead of layer8@gmailc0m [Y][N]".