(1) Obviously the trick here is that someone published these leaked accounts.
(2) Then some noobs think that they hit the jackpot and try to withdraw
(3) Then upon withdrawal, it will request for deposit
One of the oldest trick, but still noobs can fall for this.
Scammers know people scrape PasteBin for username/passwords. Usually it's just SSH "wallets" but this is the first time I've seen it link to a legitimate looking website that even includes an SSL cert.
Someone actually wrote up a rather long Medium post about the SSH Wallet scam in April, although I initially reported about it on here back in January
https://bitcointalksearch.org/topic/m.54327393
https://medium.com/bugbountywriteup/ssh-bitcoin-wallet-demystifying-another-crypto-scam-afee7ad37f35