itch.io

Thanks for the flag, that seemed sus so I did some digging, good news is it's actually benign. Which is good because I'm really enjoying this game, horniness aside I think the card game mechanics work really well.

One is a dynamic code list for codes that can be claimed in game. Some of the stuff is meant to be patreon only so I won't post that link to not undermine the dev's income or intent.

The second, https://pastebin.com/raw/CEZGneFP, is a bit more interesting - it seems to serve as a way for the dev to dynamically switch buttons on and off in the UI when they go live on twitch etc, as an easy notification for dev streams i'm assuming so we can hop in. I'm guessing the dev has something they trigger on their end that swaps out the value at that url. It looks to see if the text is 't', 'twt', 'p', or 'd', for twitch, twitter, picarto and discord. 

But yeah - Pengi, using pastebin for this might come across as suspicious, i could see it getting flagged by monitoring software even if it's a legit use. Github is a good place for storing this sort of thing when it needs versioning (like the codes maybe) and then you can refer to the RAW file url directly. The status thing is a bit harder since it's ephemeral and needs no versioning, but there's free php website hosts out there and you can also get a free .cf domain name, once all linked up you could have something like www.arcanepengi.cf/status to host the '-,t,p,d,twt' file. You could also just have a github.io site - no PHP, but no dns either and github.io is a relatively trusted domain.