这是骗子吗?

收到邮件说我网站有漏洞.
I have found a security vulnerability on your website. I would like to report this issue responsibly.

Could you please let me know:
The correct process or email address for submitting vulnerability reports
Whether you have a bug bounty or reward program for valid security findings

Once confirmed, I will share the full technical details of the issue.