big ones: google's in 118 of the 307, cloudflare in front of 111, aws ~70, microsoft ~35. that's the 70%.
clean side is mostly hetzner, some ovh and infomaniak. handful that were spotless top to bottom: forgejo, kimai, keila, solidtime, vantevo, nordname. nordname's even on desec for dns, nice. full breakdown + method here euroseal.pages.dev/audit
didn't name the offenders one by one, a single scan can be wrong about any given company and that's not fair to pin on them