What does the spend go to, besides hosting costs?

Advertising costs, to drive traffic to your site(s).

So, spam?

Surely generating spam has a cost.

You can’t just send tens of thousands of emails via your typical email service.