RFC5321 supports bare TLDs being used as email addresses, and 23 TLDs have MX records

I think the next step is to email the ones that seem valid and aren't e.g. "your-dns-needs-immediate-attention.music" and ask them if the mailbox is monitored