I think this might be a spam, can anyone tell me if it is?

Apple will always address you by your real name, never by your email address or Dear Customer. Also the sent-from address should be @apple.com or @itunes.com Additionally Apple does not send attachments.

https://support.apple.com/en-us/HT204759

It is a phishing attempt. Do nit respond to the message.

Avoid phishing emails, fake 'virus' alerts, phony support calls, and other scams - Apple Support

You're welcome.