An Annotated Field Guide to Identifying Phish