Add the fact that the account was created in 2018 and the posts were just bounty reports. Another thing to consider is that the password was changed recently.

I tend to agree that the account was stolen and that it's being used to hack someone else thru this "I forgot password...email me"