# Sarmenb.com Investigation — Executive Summary

**Date:** 2026-03-04
**Prepared for:** Investigative journalists
**Classification:** OSINT — Open Source Intelligence (passive collection only)

---

## Subject

**Sarmen Pirageneh** (legal name), also known as **Sarmen Boyadjian** (professional name), is a web developer of likely **Iranian-Armenian** heritage who operated from **Glendale, California** and has recently relocated to **Dallas, Texas**.

## Key Finding

Pirageneh maintained two parallel identities — "Sarmen Boyadjian" for his US web development career and portfolio (sarmenb.com), and "Sarmen Pirageneh" for his legal records, business filings, and a separate GitHub account. This dual identity was confirmed through:

- Two GitHub accounts: `sarmenb` (as "Sarmen B", Dallas TX) and `sarmen22` (as "Sarmen Pirageneh", Burbank CA)
- A 2019 LA County divorce filing under "Pirageneh"
- Shared connections to Glendale Community College, the 818/747 area codes, and the Armenian/Iranian diaspora community

## The Domain: sarmenb.com

The domain went through four distinct phases:

1. **2014-2019: Personal portfolio** — Standard web developer site for "Sarmen Boyadjian, Full Stack Developer"
2. **2021: Chinese industrial hijack** — Domain briefly served content for a Chinese filling machine factory (SEO spam)
3. **2023-2025: Korean illegal escort directory** — Became "흥어때" (Heung-eo-ttae), a major sex industry listing site with **186,000+ daily visitors** and **9,600+ registered members**
4. **2026: Offline** — Domain expired Dec 31, 2025, now in pending deletion at Namecheap

## The Network

sarmenb.com was not an isolated site. It was one alias domain in a **domain rotation network** consisting of:

- **10 numbered domains** (yhotte01.com through yhotte10.com)
- **10 Telegram accounts** (@YHnori_01 through @YHnori_10)
- **8 regional Telegram groups** covering all of South Korea
- **uhere.net** — the current active domain (behind Cloudflare)
- All using the same Gnuboard 5 CMS, same Google Search Console account, same templates

## The Businesses

Pirageneh operates or has operated multiple companies:

| Entity | Location | Status |
|--------|----------|--------|
| AysaSoft | Istanbul, Turkey (est. 2014) | Active — mail server running |
| AYSA International Group | California, US | WHOIS registrant for aysasoft.com |
| AYSAList | Burbank, CA / Online | Active — expanding to Armenia and USA |
| ELSA STUDIO | Glendale, CA | Domain registration entity (2015) |
| BM Express / Bmtracking | Online | Android app for shipment tracking |

## Open Questions

1. Did Pirageneh operate the Korean escort directory, or was his domain sold/hijacked?
2. What is AYSAList actually building? (API, payment processing, Armenia/USA expansion)
3. Why did he relocate from Glendale to Dallas?
4. What triggered the Jan-Mar 2026 shutdown?
5. What is the connection between the Persian-language infrastructure and the Korean escort operation?

## Evidence Collected

- 27 files totaling 3.9 MB
- 4 profile photographs (2014, 2018, plus both GitHub avatars)
- 8 Wayback Machine HTML snapshots spanning 2014-2025
- 7 AysaSoft historical snapshots spanning 2008-2021
- Certificate transparency data (32 entries for sarmenb.com)
- Full subdomain lists for yhotte04.com (27) and aysalist.com (19)
- Wayback CDX index (500 archived URLs)
- Infrastructure report covering the full yhotte/uhere domain rotation network