DMARC Does Little
DMARC protects only the actual domain. But, as the Antiphishing Working Group has reported, the actual domain name isn't very important to phishers:
"Most maliciously registered domain strings offered nothing to confuse a potential victim. Placing brand names or variations thereof in the domain name itself is not a favored tactic,since brand owners are proactively scanning Internet zone files for such names. As we have observed in the past, the domain name itself usually does not matter to phishers, and a domain name of any meaning, or no meaning at all, in any TLD, will usually do."
Global Phishing Survey: Trends and Domain Name Use in 1 H 2011, Page 15.
Biting the hand that feeds IT
