diff --git a/subfiles/cloudflared/malware.md b/subfiles/cloudflared/malware.md
index 8a8bfc5001..70afe07973 100644
--- a/subfiles/cloudflared/malware.md
+++ b/subfiles/cloudflared/malware.md
@@ -12,19 +12,19 @@ Here's the result.
 
 | TLD | Count |
 | --- | --- |
-| com | 138 |
+| com | 139 |
 | net | 16 |
-| za | 15 |
+| za | 14 |
 | org | 9 |
-| br | 8 |
+| cn | 8 |
 
 
 - Cloudflare %
 
 | Type | Count |
 | --- | --- |
-| Cloudflare | 54 |
-| Normal | 239 |
+| Cloudflare | 55 |
+| Normal | 244 |
 
 
 ### 18.4% of malware domains are using Cloudflare.
\ No newline at end of file