这是骗子吗?

收到邮件说我网站有漏洞. I have found a security vulnerability on your website. I would like to report this issue responsibly.

Could you please let me know: The correct process or email address for submitting vulnerability reports Whether you have a bug bounty or reward program for valid security findings

Once confirmed, I will share the full technical details of the issue.