Catch-all domains accept mail for every address, which breaks email verification. Here's how to detect them yourself over SMTP — and how to skip the plumbing.