.on3ojnvq { Vertical-align:top; Cursor: Pointe... -

The specific code snippet you provided, .oN3ojNVQ { vertical-align:top; cursor: pointer... , is characteristic of or "CSS stuffing," a technique often used in cybersecurity to hide malicious intent or bypass security filters. While there isn't a single "paper" named exactly after that specific class name (as such names are often randomly generated), several research papers discuss the broader topic of how these techniques are used. Relevant Research on This Topic

: Properties like vertical-align: top and cursor: pointer are used to ensure that even though the underlying code is scrambled, the UI remains functional or clickable for a user (often for credential harvesting overlays). Use of CSS stuffing as an obfuscation technique? - SANS ISC

: The SANS Institute provides a detailed analysis of "CSS stuffing," where vast amounts of unused or renamed CSS code are added to a page to bypass less effective security filtering mechanisms.