diff --git a/subfiles/cloudflared/malware.md b/subfiles/cloudflared/malware.md
index dacc92b3d9..26443bbc98 100644
--- a/subfiles/cloudflared/malware.md
+++ b/subfiles/cloudflared/malware.md
@@ -12,19 +12,19 @@ Here's the result.
 
 | TLD | Count |
 | --- | --- |
-| com | 75 |
+| com | 76 |
 | net | 12 |
 | cn | 8 |
 | ug | 7 |
-| za | 6 |
+| org | 6 |
 
 
 - Cloudflare %
 
 | Type | Count |
 | --- | --- |
-| Cloudflare | 39 |
-| Normal | 137 |
+| Cloudflare | 38 |
+| Normal | 140 |
 
 
-### 22.2% of malware domains are using Cloudflare.
\ No newline at end of file
+### 21.3% of malware domains are using Cloudflare.
\ No newline at end of file