What is a catch-all address?

A catch-all domain accepts every email sent to it, even the ones meant for mailboxes that do not exist. The practical consequence: there is no way to check whether an address is valid, since the server says yes to everything. Verification tools class these addresses as risky, without ever being able to settle the question.