So the seller shows a screenshot with browser tabs, a date and a time. One of the tabs is really very specific, looking at a particular disqus profile.

I'm not familiar with Windows; is there anything in the screenshot to suggest its torbrowser or anything like that?

Presumably the miscreant's ISP and e.g. the Russian government can guess real easy whom generated that screenshot...?

Of course what they'd do with that info is anyone's guess. It could well not be an offence to sell collections of passwords, if in deed its even an offence to hack those passwords in the first place.