Non-email sending (parked) domains can be used to generate spam email, but they’re easy to protect.

Source: National Cyber Security Centre