Boy-oh-boy I wish Google would lock analytics IDs down to a domain. Somebody in a university in Mexico City copied mine into a project they have in their www directory, and I just had to regex filter it out of GA.
seems like the amount of people who do this is rather big. Google probably thinks it's a good way to track users of websites that aren't their customers :D