Not just an expired cert on a server for the site's static assets?

Yeah, it's probably a benign explanation like that. Title changed from "Gog.com has been hacked" to "Gog.com homepage is glitchy"

yeah, that seems to be it. primary domain has a DigiCert cert valid from Feb 2023 - Feb 2024, but gog-statics.com uses Let's Encrypt and it expired about three hours ago.

for example: https://images.gog-statics.com/7aef620c84b7f73f9ac9f4e1085e0...