If PayPal is not among the payment methods for your Apple ID account, then the message should be treated as suspicious. If you like to normally pay by credit card, but also have PayPal listed, then make sure that the credit card is moved above PayPal (payment methods are tried in order). If you have PayPal listed as payment method, but no longer want to use that, then remove it from the list.
Don’t click any links in untrusted messages. Instead, go to the Settings or websites manually. Hover over links to see the URL and the domain used.
Being addressed by name is one of the signs of legitimate messages, though (as mass-mailing scammers might not have that information).
It is good to verify your payment methods once in a while, to see if they’re still as you want them organized. If your payment methods are valid, correct, and as wanted, then no further action is needed.
The listed sending address is not decisive, as it can be either legitimate or forged. The address mentioned is in legitimate use by Apple for communication about subscription services.
Identify legitimate emails from the App Store or iTunes Store - Apple Support
Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support