Ran into something interesting a week ago - the same Google Analytics code was installed on two different sites by accident. The account was reporting traffic from both domains.
Haven't found a definitive answer on how to stop this yet if it were to be used maliciously?