diff --git a/subfiles/cloudflared/malware.md b/subfiles/cloudflared/malware.md
index 960223acde..48f2f7e0d8 100644
--- a/subfiles/cloudflared/malware.md
+++ b/subfiles/cloudflared/malware.md
@@ -13,18 +13,18 @@ Here's the result.
 | TLD | Count |
 | --- | --- |
 | com | 126 |
-| za | 16 |
-| net | 15 |
-| org | 7 |
-| br | 6 |
+| za | 17 |
+| net | 11 |
+| org | 8 |
+| cn | 5 |
 
 
 - Cloudflare %
 
 | Type | Count |
 | --- | --- |
-| Cloudflare | 40 |
-| Normal | 214 |
+| Cloudflare | 39 |
+| Normal | 202 |
 
 
-### 15.7% of malware domains are using Cloudflare.
\ No newline at end of file
+### 16.2% of malware domains are using Cloudflare.
\ No newline at end of file