diff --git a/subfiles/cloudflared/malware.md b/subfiles/cloudflared/malware.md
index 57a2b9e55c..e28532b8c0 100644
--- a/subfiles/cloudflared/malware.md
+++ b/subfiles/cloudflared/malware.md
@@ -12,10 +12,10 @@ Here's the result.
 
 | TLD | Count |
 | --- | --- |
-| com | 104 |
+| com | 101 |
 | net | 14 |
+| za | 10 |
 | ru | 9 |
-| za | 9 |
 | cn | 8 |
 
 
@@ -23,8 +23,8 @@ Here's the result.
 
 | Type | Count |
 | --- | --- |
-| Cloudflare | 31 |
-| Normal | 195 |
+| Cloudflare | 32 |
+| Normal | 193 |
 
 
-### 13.7% of malware domains are using Cloudflare.
\ No newline at end of file
+### 14.2% of malware domains are using Cloudflare.
\ No newline at end of file