> Since both numerator and denominator are bumped up, is it really malicious?

2 bins out of 4 suggests 25%-50%

3 bins out of 5 suggests 40%-60%