diff --git a/subfiles/cloudflared/malware.md b/subfiles/cloudflared/malware.md
index 257a05fa65..5ce98e15a2 100644
--- a/subfiles/cloudflared/malware.md
+++ b/subfiles/cloudflared/malware.md
@@ -12,11 +12,11 @@ Here's the result.
 
 | TLD | Count |
 | --- | --- |
-| com | 109 |
-| net | 15 |
-| ru | 10 |
-| za | 8 |
+| com | 103 |
+| net | 13 |
+| ru | 9 |
 | ug | 8 |
+| cn | 7 |
 
 
 - Cloudflare %
@@ -24,7 +24,7 @@ Here's the result.
 | Type | Count |
 | --- | --- |
 | Cloudflare | 37 |
-| Normal | 196 |
+| Normal | 186 |
 
 
-### 15.9% of malware domains are using Cloudflare.
\ No newline at end of file
+### 16.6% of malware domains are using Cloudflare.
\ No newline at end of file