questions to ask yourself as a self check for phishing