diff --git a/subfiles/cloudflared/malware.md b/subfiles/cloudflared/malware.md
index 72cd62d4fa..7e1ac2b502 100644
--- a/subfiles/cloudflared/malware.md
+++ b/subfiles/cloudflared/malware.md
@@ -13,18 +13,18 @@ Here's the result.
 | TLD | Count |
 | --- | --- |
 | com | 341 |
-| net | 37 |
+| net | 38 |
+| za | 22 |
 | org | 21 |
-| za | 20 |
-| br | 18 |
+| br | 20 |
 
 
 - Cloudflare %
 
 | Type | Count |
 | --- | --- |
-| Cloudflare | 82 |
-| Normal | 617 |
+| Cloudflare | 86 |
+| Normal | 616 |
 
 
-### 11.7% of malware domains are using Cloudflare.
\ No newline at end of file
+### 12.3% of malware domains are using Cloudflare.
\ No newline at end of file