Symptoms
API PlaceOrderAndAuthorize_API allows to place an order with a wrong DomainID (e.g. DomainID=tld) as a service parameter.
Cause
The call is not supposed to validate service parameters, it is mentioned in in the documentation
"Selected API method does not have a built-in validator for provisioning parameters passed. Note: You can use the PlanParamsGetAndValidate_API method to validate service template (ST) service parameters before passing them to PlaceOrderAndAuthorize."
PlanParamsGetAndValidate_API validates the DomainID correctly, for example for PEMGATE based services it returns "Domain Name should contain '.' (dot)" error in case of wrong parameter passed.