A Dominican investigative reporter’s iPhone was flagged multiple times in a Pegasus case that highlights how mobile spyware is usually proven by forensic residue, not visible alerts.