> It's highly doubtful that's some random person will send some security vulnerabilities about a company to another unrelated company. When I had a small web-c

> It's highly doubtful that's some random person will send some security vulnerabilities about a company to another unrelated company. When I had a small web-crawling/automation business we'd get quite few emails like that oferring all sorts of datasets and security holes for sale. We never responded (people already have a hate boner for web-crawlers lol). Maybe someone with more gray/black hat infosec knowledge could comment on plausability on this but honestly I wouldn't underestimate black hat sales skills :)