You can compare to get newly registered domain names so it's sometimes used for Spam to target new companies - I've not noticed that so much lately though.

I suppose you could identify recent NS changes to create a list of servers/hosting that might not have been locked down or secured yet.

But on the whole I can't personally think of anything too bad.