Update: this is actually ZeroBounce’s Verify+ feature which we figured out after some escalation. It’s now disabled!