MX lookup and RCPT probe; if port 25 is unreachable, also tries 587 (STARTTLS) and 465 (SMTPS) on the same host. 250 does not guarantee a real mailbox.