I apologize in advance if I am violating a necro-thread rule, but I just want to thank Cyberjew for his solution.
"Just use travelmate (Travelmate support thread ) which keeps the rebind protection enabled but automatically whitelist such cp domains, e.g.:"
Not sure if I misconfigured something, but TravelMate was not handling this rebind protection for me.