validate URL has a public suffix