How Does DMARC Avert Phishing?