This is a scam right?

I have been sent this email multiple times over the last 2 months and had immediately written it off as a scam, but it has also been sent to practically every other email address within my organisation too.

We do work with pcisecuritystandards.org to ensure that our business procedures are inline with secure practices, but i'm pretty sure they are just using that domain in an effort to make it appear legit.

Am I correct in my assumption that the only safe place to get zc modules from is https://www.zen-cart.com?

I'll screenshot the url the email points to rather than posting an actual url that might also involve malware installation.

Thanks for your time.
CunningStunt

Apologies for posting in the wrong forum, I have my answer

Yes, it is a scam.
Warning: Fake solicitation about upgrades for pci compliance