SAC Attorneys LLP handles business and immigration matters for Silicon Valley clients — work that regularly involves sensitive personal and financial data. Two issues stood out on a pass through the live site.
Hardcoded Google Analytics linker parameter in the Spanish-site link
The homepage's Español navigation item points to the firm's Spanish-language subdomain with a Google Analytics cross-domain linker parameter written directly into the HTML:
https://abogado.sacattorneys.com/?_gl=1*nhwzhf*_gcl_au*MTA4MjgyNzk4OS4xNzE1MDA4ODQ1That _gl value is meant to be generated fresh per visitor session so
Analytics can stitch a single visit together across the two domains. Baked into the
page source as a static string, it instead stamps every visitor who clicks
through to the Spanish site with the same stale session ID — which quietly corrupts
cross-domain attribution and session data for the firm's Spanish-speaking traffic,
likely their fastest-growing segment.
Chinese-language site lives on a separate, unbranded domain
The 中文 nav link routes off sacattorneys.com entirely to
mysvlawyers.com — a different domain with no visible connection back to
the SAC Attorneys brand. If this is intentional (a sister practice), no issue. If it's
a leftover from an older site structure, it means a meaningful share of prospective
clients land on a page that doesn't reinforce who they're contacting.
Findings verified against live page source on the audit date above. Site platform: Justia Elevate.