The site even provides a link to a Webmoney account that in fact does appear to be four years old, Corrons said. However the domain itself appears to have been registered by someone in Moscow only a couple of days ago, he said.

"We've been looking at it and we are 99.9% sure it is a ruse," to get people to pay up money in exchange for what they think will be legitimate Facebook credentials, he said.

At least as of the last time PandaLabs inspected the site, it was not downloading or distributing any malware and seems to have been set up purely to scam those seeking to gain illegal access to Facebook accounts, Corrons said.

Those who do fall for the scam are unlikely to go to law enforcement to report it, he noted.