diff --git a/subfiles/cloudflared/malware.md b/subfiles/cloudflared/malware.md
index c3087c30c2..8086554744 100644
--- a/subfiles/cloudflared/malware.md
+++ b/subfiles/cloudflared/malware.md
@@ -12,19 +12,19 @@ Here's the result.
 
 | TLD | Count |
 | --- | --- |
-| com | 105 |
-| net | 13 |
+| com | 113 |
+| net | 12 |
 | ru | 10 |
+| za | 9 |
 | ug | 9 |
-| cn | 7 |
 
 
 - Cloudflare %
 
 | Type | Count |
 | --- | --- |
-| Cloudflare | 36 |
-| Normal | 195 |
+| Cloudflare | 35 |
+| Normal | 207 |
 
 
-### 15.6% of malware domains are using Cloudflare.
\ No newline at end of file
+### 14.5% of malware domains are using Cloudflare.
\ No newline at end of file