Sixfold

Sixfold: a daily word puzzle. Nine tiles, six hidden connections. Rearrange the grid so every row and column is a group, then lock it in.

Games

Added July 13, 2026 · Last analysed July 13, 2026 · via Hacker News

Own this Launch?

StackScope records what new websites are built with, the week they launch. Most we find ourselves, by watching public internet infrastructure for brand-new sites; the rest come from Product Hunt, Hacker News and PeerPush. We crawled this one for its tech stack and scored it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 13 July 2026; the live site may have changed since.

Every technology below links to its own page: which other new sites launched with it. Vendors and agencies watch those pages with Stackdar and hear about new adopters the week they ship, from £15 a month.

Sixfold ships with the basics, with a thorough launch checklist. What needs work: missing several security headers, incomplete legal pages, and no sitemap.

Launched on Hacker News on July 13, 2026. The site is hosted on Laravel Cloud and served through Cloudflare, with a domain registered in 2008. We've detected 8 technologies on this site, covering CDN, CSS frameworks, developer tools, and frameworks. The stack includes Tailwind CSS, Vue.js, and Cloudflare.

If you own this site, refresh the snapshot and see the full fix list any time →

4.5

StackScope Score

Fair

88/100 Launch Readiness

Launch ready

2/6 Security Headers

Weak

0/3 Legal

Missing

1/2 Crawl files

Partial

100/100 Performance

Fast

Vibe Score 0 · No AI signals

How much the site looks AI-generated. Informational pattern-match signal, not a verdict. Does not feed the StackScope Score. See which fingerprints fired →

Tech Stack (8)

Infrastructure

CDN	Cloudflare (2)
Hosting	Laravel Cloud
Protocol	HTTP/3
Security	Cloudflare Bot Management

Build & Framework

CSS framework	Tailwind CSS
Developer tools	Vite
Framework	Vue.js
Realtime	Pusher (2)

Infrastructure

Network

CLOUDFLARENET - Cloudflare, Inc., US

AS13335 · US

DNSSEC

Not enabled

DNS responses unsigned. Cache-poisoning vulnerable.

Green hosting

Green hosted

Host runs on renewable energy. Data from The Green Web Foundation.

SSL Certificate

Google Trust Services

Valid 10 Jul 2026 to 8 Oct 2026

Certificate as captured in this snapshot, not a live check.

Domain Age

18.1 years

Registered Aug 2008 · GoDaddy.com, LLC

Email Security

✗

SPF Not published. Your domain can be spoofed in phishing emails.

✓

DKIM (via apex pwheslop.com) Detected on apex pwheslop.com

✓

DMARC p=reject (via apex pwheslop.com) Reject (strict). Strong.

MTA-STS Not deployed. Mail to your domain can be downgraded to plaintext en route.

TLS-RPT Not configured. You won't hear about silent SMTP TLS handshake failures.

Storage (7)

Cookies (6)

Name	Lifetime	Detected as
cf_clearance	1y	Cloudflare
sixfold-session	2h	-
VJ4GNntcbntuEZdPCJKLAB80WQwXwDWU7kd3C1Hy	2h	-
XSRF-TOKEN	2h	-
_cfuvid	session	Cloudflare
__cf_bm	< 1h	Cloudflare

Local storage (1)

Key	Size	Detected as
pusherTransportTLS	77 B	Pusher

Readiness Breakdown How?

⚠

Custom title and meta description (partial) missing custom <title>

✓ Open Graph tags (title, image, description)

✓ Twitter card meta tags

✓ Canonical URL declared

✓ Responsive viewport meta tag

✓ Favicon present

✓ Semantic HTML (nav, main, article)

Performance How?

253 ms Server response

53% Faster than peers

592 ms Largest contentful paint

0.00 Cumulative layout shift

132 KB Page weight

1 Third-party domains

0 Console errors

0 Failed requests

Indicative grade from a single automated render, not a substitute for Lighthouse or field data, and not part of the StackScope score.

AI Stance

No AI stance declared

✗ llms.txt published

✓ No AI bots blocked in robots.txt

Content-Signal

? No directive declared

Link headers

? None advertised

Well-Known Files

✓ robots.txt

✗ sitemap.xml

✗ security.txt

✗ llms.txt

✗ ads.txt

✗ humans.txt

Legal

? Privacy Policy not detected

? Terms of Service not detected

Detection works best on English language sites.

Security Headers (2/6)

✗

Referrer-Policy

✓

X-Frame-Options

✗

Permissions-Policy experimental (check browser support)

✓

X-Content-Type-Options

✗

Content-Security-Policy

✗

Strict-Transport-Security

–

X-XSS-Protection deprecated (use Content-Security-Policy)

Build

1 JS files

2 CSS files

1 Third-party domains

Brand Colours

Something not look right? If a technology shown here is wrong or out of date, email [email protected] and we'll review it.