My understanding is that most phishing attacks are launched from webmail accounts, which implement DMARC.