diff --git a/subfiles/cloudflared/malware.md b/subfiles/cloudflared/malware.md
index f88cbecdee..1c66cf3d69 100644
--- a/subfiles/cloudflared/malware.md
+++ b/subfiles/cloudflared/malware.md
@@ -13,18 +13,18 @@ Here's the result.
 | TLD | Count |
 | --- | --- |
 | com | 111 |
-| net | 13 |
-| za | 12 |
+| net | 12 |
+| za | 11 |
 | ug | 9 |
-| ru | 7 |
+| cn | 7 |
 
 
 - Cloudflare %
 
 | Type | Count |
 | --- | --- |
-| Cloudflare | 32 |
-| Normal | 204 |
+| Cloudflare | 33 |
+| Normal | 209 |
 
 
 ### 13.6% of malware domains are using Cloudflare.
\ No newline at end of file