This is a big point. The internet probably has a million systems that have a regexp somewhere listing all the top level domain names that were valid at the time, and half of them aren't maintained and will stay broken forever.

That being said, email validation needs to check for trivial issues (i.e., have you entered a non-empty string? does it have a @ somewhere?) and the proper validation happens if a verification email gets delivered or not.