only add at tld for enrichment if host or query is a FQDN