// reference investigation

whitfield-deed-forgery — corelogic deed chain + spoofed seller thread

Whitfield Title WTE-2026-0508-DF on parcel 108-12-3345 (8 Mesquite Ridge · Pima AZ) — true owner M. Whitfield discovered forged 2026 quitclaim to Mesquite Holdings LLC followed by resale to Desert Sun Properties LLC. CoreLogic deed history, spoofed seller email, incremental quitclaim PDF. Fully synthetic.

what this proves

all four primaries (corelogic deed export · seller email thread · quitclaim pdf revision metadata · pdf signature-chain structure) produce deterministic, fixture-locked output on the oakwood vacant-lot deed-forgery synthetic cluster.
every output runs 100% locally — county exports, correspondence, and recorded instrument never upload.
on parcel 47-1245-1138 the corelogic engine surfaces 7 findings (CRITICAL assessment): grantee change without sale on both the 2019 inheritance and the 2026 forged quitclaim, nominal-consideration quitclaim on the same two rows, owner-mailing-address mismatch when the tax mailing party did not change with the grantee, a grantee-mismatch cluster, and verified=false on the forged instrument. the email engine builds a single 3-message thread (0 missing parents) between the spoofed seller and the conveyance-agent inbox.
instrument-20260410-1745321-quitclaim.pdf is an incremental quitclaim with author drift (Marcus Hayes → Unknown) and Microsoft Print To PDF producer on revision 2 — 2 xref sections, document IDs change. signature-chain analyzer finds no /Sig dictionaries (raster grantor/notary blocks only — no byte-range certificate), matching the forged-instrument narrative.

primary engines locked to this fixture

build the case binder

runs all four primary engines on the synthetic evidence zip and opens a self-contained html binder. no upload.

runs all 8 primary engines locally on the synthetic evidence zip · opens a self-contained html binder · no upload

download the synthetic evidence

MIT-licensed, fully synthetic. corelogic datatree deed export ndjson · three spoofed seller correspondence .eml messages · incremental quitclaim instrument pdf · revision metadata companion json · incident context · chain of custody.

download evidence zip →download goldens zip →run this kit in your browser →

built deterministically from scripts/fixtures/build-whitfield-deed-forgery.mjs. seed: whitfield-deed-forgery:v1.

methodology

title-fraud deed-forgery starts with hashed county deed-history exports plus seller correspondence and the disputed recorded-instrument PDF, then walks the deed chain through corelogic + mail-thread parsers before counsel packet assembly. not legal advice on fault. read the full title fraud · deed forgery guide →

methodology article deed forgery playbook forensics home

whitfield-deed-forgery — corelogic deed chain + spoofed seller thread

what this proves

all four primaries (corelogic deed export · seller email thread · quitclaim pdf revision metadata · pdf signature-chain structure) produce deterministic, fixture-locked output on the oakwood vacant-lot deed-forgery synthetic cluster.

every output runs 100% locally — county exports, correspondence, and recorded instrument never upload.

on parcel 47-1245-1138 the corelogic engine surfaces 7 findings (CRITICAL assessment): grantee change without sale on both the 2019 inheritance and the 2026 forged quitclaim, nominal-consideration quitclaim on the same two rows, owner-mailing-address mismatch when the tax mailing party did not change with the grantee, a grantee-mismatch cluster, and verified=false on the forged instrument. the email engine builds a single 3-message thread (0 missing parents) between the spoofed seller and the conveyance-agent inbox.

instrument-20260410-1745321-quitclaim.pdf is an incremental quitclaim with author drift (Marcus Hayes → Unknown) and Microsoft Print To PDF producer on revision 2 — 2 xref sections, document IDs change. signature-chain analyzer finds no /Sig dictionaries (raster grantor/notary blocks only — no byte-range certificate), matching the forged-instrument narrative.