I have the same problem, i've tried whitelisting these domains:
sdk.split.io
events.split.io
tags.tiqcdn.com
app-measurement.com
w.usabilla.com
firebase-settings.crashlytics.com
To no avail. I've written a complaint to rabobank.nl, the app should function without tracking me