In these cases, the domain becomes a weapon. The "protection" it offers is purely for the attacker’s botnet, shielding their C2 traffic behind a name that sounds defensive.
Many bots are designed to find "holes" in your plugins or themes to inject malware. How to Get Started antibot.pw