.on3ojnvq { Vertical-align:top; Cursor: Pointe... -

: Properties like vertical-align: top and cursor: pointer are used to ensure that even though the underlying code is scrambled, the UI remains functional or clickable for a user (often for credential harvesting overlays). Use of CSS stuffing as an obfuscation technique? - SANS ISC

: A study available on ResearchGate analyzes how obfuscation in web technologies (like JavaScript and CSS) impacts intellectual property and facilitates malicious code deployment. .oN3ojNVQ { vertical-align:top; cursor: pointe...

: For a more academic framework, a paper on ResearchGate categorizes various layout and data obfuscation methods, including those that modify the visual structure of a program. : Properties like vertical-align: top and cursor: pointer

The specific code snippet you provided, .oN3ojNVQ { vertical-align:top; cursor: pointer... , is characteristic of or "CSS stuffing," a technique often used in cybersecurity to hide malicious intent or bypass security filters. While there isn't a single "paper" named exactly after that specific class name (as such names are often randomly generated), several research papers discuss the broader topic of how these techniques are used. Relevant Research on This Topic : For a more academic framework, a paper

: Identifiers like .oN3ojNVQ are used to prevent automated tools from recognizing the purpose of the element.

: The SANS Institute provides a detailed analysis of "CSS stuffing," where vast amounts of unused or renamed CSS code are added to a page to bypass less effective security filtering mechanisms.