That’s perfectly consistent with sources of bad actor data I have access to and compile myself.