dh-small-subgroup.
badssl.com

This site uses an ephemeral Diffie-Hellman key exchange
over a 2048-bit group with a 31-bit subgroup.