Comment by Nadya

Why does your solution "feel stupid"? It's the most straight forward and workable solution.

You have two options:

a) Whitelist all domains you want (if you only want specific 'work' domains)

b) Blacklist those you do not want