HHS requested we add a large handful of subdomains not showing up in their HTTPS/Trustymail reports.  The original list has been compared to the list we are currently scanning, and those that weren't already being scanned have been added here.

HHS sent us a long list of domains to add to their BOD 18-01 reports. We reviewed all the non-.gov base domains for association that it was either managed by or specifically on HHS' behalf, resulting in the smaller number of adds you see at cisagov/scan-target-data#48.  These are the subdomains for those that were included in the list.

SBA has requested that we add disasterloanassistance.sba.gov so that it shows up in their Trustymail and HTTPS reports.  I verified it is not currently being picked up in the sources gathered by double checking for its presence in their report.