Really shady stuff! Please see.

For what it is worth, the suspicious domains are being injected into the Google Analytics stream by a tool that creates fake traffic referrals. Most people assume it is coming from SEMalt’s nefarious botnet but there are other traffic faking tools that have been on the market for years.

You’ll have to create filters in Google Analytics to prevent those domains from being recorded in future hit reports. You can also create reports with their own special filters to remove those domains from data that has already been captured.

Although a lot of people really like the Google Analytics reporting interface it is an inferior tool that is easily manipulated by all sorts of rogue bots. At the very least you should consider using a second analytics package. Automattic’s own Jetpack offers pretty good analytics data and they filter out a lot of those fake domains. Their reports are not quite as advanced as GA’s but their interface is much easier to use.

You will also have to block some of the bad domains in your .htaccess file since those bot really do hit your Website. But the majority of the fake referral data is generated by bots that only trigger the Google Analytics Javascript without ever visiting your site.

Google Analyticator has no connection to the fake referrals.