diff --git a/Source/domainset/cdn.conf b/Source/domainset/cdn.conf
index dae8eceb..8e9f9c2b 100644
--- a/Source/domainset/cdn.conf
+++ b/Source/domainset/cdn.conf
@@ -2390,6 +2390,7 @@ fiddle.jshell.net
 .pornimg.xyz
 .hits.b3log.org
 .safebrowsing.apple
+safebrowsing.brave.com
 .divio-media.net
 .widget.clutch.co
 .giscus.app
diff --git a/Source/ip/reject.conf b/Source/ip/reject.conf
index 67541e88..52edb1fb 100644
--- a/Source/ip/reject.conf
+++ b/Source/ip/reject.conf
@@ -2,6 +2,9 @@
 
 # Commonly used by cloud computing instances as the metadata service
 # Should not be used in the local environment
+# Also, VSCode GitHub Copilot plugin sends telemetry going haywire, at 2 req/s
+# Let's Surge drop the packets to prevent flooding
+# https://github.com/microsoft/vscode-copilot-release/issues/1496#issuecomment-2422464393
 IP-CIDR,169.254.169.254/32,no-resolve
 
 # DNS resolved to 0.0.0.0 should not leak to the LAN
diff --git a/Source/non_ip/reject-drop.conf b/Source/non_ip/reject-drop.conf
index 6b6c95c4..721630ee 100644
--- a/Source/non_ip/reject-drop.conf
+++ b/Source/non_ip/reject-drop.conf
@@ -2,5 +2,11 @@
 # $ meta_description This file This file contains rules for domain should be used with REJECT-DROP policy.
 
 DOMAIN-SUFFIX,geo2.adobe.com
+
+# VSCode GitHub Copilot plugin sends telemetry going haywire, at 2 req/s
+# Let's Surge drop the packets to prevent flooding
+# https://github.com/microsoft/vscode-copilot-release/issues/1496#issuecomment-2422464393
+DOMAIN-SUFFIX,in.applicationinsights.azure.com
+
 DOMAIN-SUFFIX,undefined
 DOMAIN-SUFFIX,null