diff --git a/subfiles/cloudflared/malware.md b/subfiles/cloudflared/malware.md
index 737457a3e6..43242263bf 100644
--- a/subfiles/cloudflared/malware.md
+++ b/subfiles/cloudflared/malware.md
@@ -12,19 +12,19 @@ Here's the result.
 
 | TLD | Count |
 | --- | --- |
-| com | 202 |
+| com | 195 |
 | net | 27 |
+| org | 13 |
 | za | 12 |
-| org | 12 |
-| ru | 10 |
+| cn | 10 |
 
 
 - Cloudflare %
 
 | Type | Count |
 | --- | --- |
-| Cloudflare | 44 |
-| Normal | 359 |
+| Cloudflare | 43 |
+| Normal | 358 |
 
 
-### 10.9% of malware domains are using Cloudflare.
\ No newline at end of file
+### 10.7% of malware domains are using Cloudflare.
\ No newline at end of file