@samwcyo @GoDaddy hey, at least they called it correctly, coordinated vulnerability disclosure, and that could be a good start