Reporting the post is enough at this point. Flagging the user for this is not necessary. I can see the threads have not been deleted yet so I suggest everyone to report the same ASAP and those who can see older reports can see if they got marked as "GOOD" or "BAD".
Possible the account could have been hacked in which case the red tag and the flags become overkill. >>
This user recently woke up from a long period of inactivity.
It's not an overkill. That's pretty much the standard procedure for anyone who posts scam websites or links here whether hacked or not.
Besides you can't accurately gauge that an account that just woke up minus even any password or email change was hacked unless the owner complains about it in meta and attempts to recover it. The Red tags and flags are meant to suggest that the person behind the account cannot be trusted.
However I am not suggesting removing them right away but if the posts get deleted then of course they should be removed. Just my two sats.
So that they continue posting ANNs containing phishing links/scam links with no warnings to guests and newbies afterwards?