I remember when best web practices were a thing. One of the sacred ones was to not use pop-ups. You could find them in tabloids and other low-level websites of the kind. Forward 15 years to today and now even the most prestigious websites do it. I’d say that’s a good example.

Yes those are all clues on how to detect a possible spoof text. Yet, what some of us want to know is how tracing back a spoofed number that displays a valid existing number, results in determining that the text originated from Twilo. How does it make that distinction?

Granted that the email spoof is true, crank100 was asking about the tracing of the CEO’s number. Which is what the previous user mentioned as tracing it back to Twilio. That question remains unanswered AFAIK.

Most wars don’t have legal reasoning.