Domain-based traffic routing to a separate outbound server

[Furciferrr]

I’m trying to implement domain-based traffic routing where all traffic to domains in the .xx is routed through a separate outbound server, while all other traffic goes directly.

The goal is not a full VPN tunnel, but selective routing based on domain name.

The problem

When routing HTTPS traffic for .xx domains:
• Safari fails with:
“Safari can’t open the page because it couldn’t establish a secure connection to the server”
This problem does not occur when traffic is routed directly.

Any ideas how can I implement it using Marzban?