Google I am talkign to you.
Its simple - make a key be a requirement for Google Analytics Measurement Protocol. Each key can only send traffic to one domain. This key will be linked to your gmail account. This will eliminate the easiest form of this spam.
I for one have several tools that use this protocol and would be happy to update them to get rid of spam.