You could do soft validation that provides protection for common mistakes while still allowing users to use domains you didn't expect.

"Did you mean layer8@gmail.com instead of layer8@gmailc0m [Y][N]".

Indeed, “do you really mean that?” would be useful, though I would always have the user type the correction themselves, because too many users would select “Yes” without thinking or attentively verifying.