Domain-level contact preflight with MX provider, SPF, DMARC and structured risk signals. Does not claim mailbox existence.