Do we put the link to their profile, or do we actually have to link the website on their profile?

If you're reporting a specific forum post or run or something like that, that's what that's for. If none of that is applicable then yeah just link the profile.