diff --git a/subfiles/cloudflared/malware.md b/subfiles/cloudflared/malware.md
index 0e4123dcd6..87e01d1481 100644
--- a/subfiles/cloudflared/malware.md
+++ b/subfiles/cloudflared/malware.md
@@ -13,18 +13,18 @@ Here's the result.
 | TLD | Count |
 | --- | --- |
 | com | 345 |
-| net | 32 |
+| net | 31 |
 | br | 30 |
+| za | 25 |
 | in | 24 |
-| za | 24 |
 
 
 - Cloudflare %
 
 | Type | Count |
 | --- | --- |
-| Cloudflare | 64 |
-| Normal | 642 |
+| Cloudflare | 62 |
+| Normal | 643 |
 
 
-### 9.1% of malware domains are using Cloudflare.
\ No newline at end of file
+### 8.8% of malware domains are using Cloudflare.
\ No newline at end of file