boardgamearena.com

HTML metadata

Title

Play board games online from your browser • Board Game Arena

Description

The world's #1 platform for playing board games online. Play hundreds of board games from your browser for free.

Language

en

Canonical

https://en.boardgamearena.com/

Translations

ar
be
bg
br
ca
cs
da
de
el
en
es
et
fa
fi
fr
gl
he
hr
hu
id
it
ja
ko
lt
lv
ms
nl
no
pl
pt
ro
ru
sk
sl
sr
sv
th
tr
uk
vi
zh
zh-cn

Open Graph

url: https://en.boardgamearena.com/
title: Play board games online from your browser
locale: en_US
site name: Board Game Arena
description: The world's #1 platform for playing board games online. Play hundreds of board games from your browser for free.

Technology

Server: nginx

Analytics

Google Tag Manager

Third-party hosts loaded (2)

x.boardgamearena.net×36
www.googletagmanager.com×1

Social

Registration

Registrar

Nameshield SAS

Created

2010-11-13

Expires

2026-11-13 177 days left

Updated

2025-03-30

Name servers

aiden.ns.cloudflare.com
sreeni.ns.cloudflare.com

DNS records live

NS

aiden.ns.cloudflare.com
sreeni.ns.cloudflare.com

MX

0 boardgamearena-com.mail.protection.outlook.com

TXT

Show 6 TXT records

zscaler-verification-167757720-19112025-RmU53J
MS=ms50590395
brevo-code:e287f50d39b9044f73d2c27c55cbb6d4
google-site-verification=8-gmBENIKzcG2BrcJ2f7HjK6q219aX5KY9UgKCq0WBc
google-site-verification=Ff-6IlC2K4vBcir51iMHq0_ZuukpX5YlNNGQ433omc0
wiz-domain-verification=8b831494ab35a77a0439ddaaeabd1fddeb4017621636c6d07fadb15c8dd5be42

Email authentication strong

SPF

v=spf1 ip4:91.121.44.226 include:_spf.google.com include:sendgrid.net include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; sp=none;

policy: reject (enforced) · sp=none

DKIM

Show 6 DKIM selectors

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/aRr+cJAaThtQDk7+kO3K/A7l9/VOza+NJpW2RbhtEW/OoG4X5kwRLtA0NtDcp7Ia+Zi62Eb1FoWf…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n1KLhB88jpcrEZkuEAjdn2a4+PVpDyl7K+U4bgTTdgs6t+QEDBIoT/rPJslkErvFAI+wRQHYecgB+…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
dkim: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9nxNpIailvGOab5zc3a+VmIDDtii1TZKdKa6ETEccXtFX/Z+D7051f/VKvWx/GWCnnsEEkleRetMQXW9K+YC2OrAFBXL…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd0M0EoamIOHmX66/wnZiqhSDt+ZGL95F/fjp1cPRYQNt1OmelE/7Za7miEWS6WUMVciVlhSopAlZQCUMz…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCt73yv4PRg/GQAp0GOMlA9RKj+lDeWy7xrVX1XmmR2/kCxuffrjQ5fWW6faWn8W2kufW3s/iRmBMNShPUBuYHkrs…

selectors probed

Certificate (current)

R12

from 2026-03-23 to 2026-06-21

Expires in 33 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://en.boardgamearena.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' boardgamearena.com *.boardgamearena.com:* *.boardgamearena.net ; script-src 'self' boardgamearena.com *.boardgamearena.com:* *.boardgamearena.net sdk.privacy-center.org browser-update.org *.clarity.ms connect.facebook.net *.google.com *.gstatic.com *.googlesyndication.com *.googletagmanager.com *.google-analytics.com unpkg.com/web-vitals/ *.googleapis.com js.stripe.com *.paypal.com *.paypalobjects.com *.twitter.com *.youtube.com 'unsafe-inline' 'unsafe-eval' blob: ; style-src 'self' boardgamearena.com *.boardgamearena.com:* *.boardgamearena.net *.google.com *.googleapis.com *.typekit.net code.iconify.design 'unsafe-inline' data: ; img-src * data: blob: ; font-src 'self' boardgamearena.com *.boardgamearena.com:* *.boardgamearena.net *.typekit.net fonts.gstatic.com fonts.googleapis.com ff.static.1001fonts.net db.onlinewebfonts.com data: ; connect-src 'self' boardgamearena.com *.boardgamearena.com:* wss://*.boardgamearena.com:* *.boardgamearena.net wss://*.boardgamearen
strict-transport-security: max-age=31536000;