Thanks, @Muse. I typically trash these types of things, but have never gotten one like this. Looking at the header of the email, it was sent from

with the IP address which traces to Spain (explaining the broken English in the email).

I did a quick visual of my site contents via FTP and nothing looked unusual, but I'll do as you suggest and run a malware scan.

Thanks again.