A shared address, domain or mail server is a lead, not a verdict — most often the same administrator (accountant / corporate-services provider), not a single group.
Risk signals
1 matched
medium
Single-bidder procurement pattern
2 of 4 public-tender wins had only ONE bidder (50%) — the classic bid-rigging / suppressed-competition signal