A lot of spam from @notifications.zohosheet.eu address

A lot of spam from @notifications.zohosheet.eu address

In last week Inbox.lv email service has problem with spam from ZOHO side. More that 100K letters daily. I wrote about problem to your system emails, but unfurtunaly w/o answer. 
As quick fix, we tried to block your IP addresses, but we hope to the helping from your side.
 
At this time, some part of ZOHO messages go to Spam, but some part are Rejected.
Can you please help to our and your clients and stop spam sending?  

Message Header:
  2. Return-Path: <noreply+925b4e60-7663-11ec-bf10-525400b65433_vt1@notifications.zohosheet.eu>
  3. Received: from timmy5-clean.inbox.lv ([10.0.1.75])
  4. by brat19.inbox.lv (Cyrus 2.5-125) with LMTPA;
  5. Fri, 21 Jan 2022 14:33:49 +0200
  6. Received: from localhost (ham8 [10.0.1.108])
  7. by timmy5-clean.inbox.lv (Postfix) with ESMTP id 1E289300004
  8. for <user@inbox.lv>; Fri, 21 Jan 2022 14:33:49 +0200 (EET)
  9. X-Spam-Flag: YES
  10. X-Spam-Score: 6.501
  11. X-Spam-Status: Yes, score=6.501 tagged_above=4 required=5
  12. tests=[INBOX_ZOHO=5.5, KAM_EU=0.5, KAM_NUMSUBJECT=0.5,
  13. KAM_SHORT=0.001] autolearn=no autolearn_force=no
  14. Received: from kas1.inbox.lv ([10.0.1.91])
  15. by localhost (ham8.inbox.lv [10.0.1.100]) (spamfilter, port 25)
  16. with ESMTP id 0Mn-bKkhvr0z for <user@inbox.lv>;
  17. Fri, 21 Jan 2022 12:33:48 +0000 (UTC)
  18. Received: from sender196.eu.transmail.net (sender196.eu.transmail.net [31.186.226.196])
  19. by timmy5-world.inbox.lv (Postfix) with ESMTPS id 079BF88059B
  20. for <user@inbox.lv>; Fri, 21 Jan 2022 14:33:46 +0200 (EET)
  21. ARC-Seal: i=1; a=rsa-sha256; t=1642293059; cv=none; 
  22. d=zohomail360.eu; s=zohoarc; 
  23. b=hWZ1SzsAK3aE+SvU/oaW63xtgJIMygw5CJ8D3PBLBsgGGLdLpWobHzI8YDUUv2kXgKjJzzaBeEQyLDhkFJ5QTMTdc68HMdvu+pj0XvgCJ0JNiwAs18BBn/typ7fq4d9+6g/06qcg8laZ+GH3dKKVAiR97CRzdUyQN6V9TPlxaC4=
  24. ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail360.eu; s=zohoarc; 
  25. t=1642293059; h=Content-Type:Date:From:MIME-Version:Message-ID:Sender:Subject:To; 
  26. bh=HI/cEd6HL1apQjKDwMrN3xLTtPOZNa3Z+7h1/aCYHFo=; 
  27. b=FJQbnmyFQxRDeOpNE88OHu5waCKJKz5B4JRr41FFK9r4rcKzMtHONxDSKRfOBFsh5P4IO0DcohX/mBsL3IPI3BGPFdsM+36R15YhTZMFs7praBAw9+ubvY51lVwMUPmQQ0aQo6keh3Q8yWN8f4wFzOSnM2Q5O163seDcCV5cEaA=
  28. ARC-Authentication-Results: i=1; mx.zohomail360.eu;
  29. dkim=pass  header.i=kaneriskolav.ru;
  30. spf=pass  smtp.mailfrom=noreply+925b4e60-7663-11ec-bf10-525400b65433_vt1@notifications.zohosheet.eu;
  31. dmarc=pass header.from=<16@kaneriskolav.ru>
  32. Received: from [172.26.23.220] (172.26.23.220 [172.26.23.220]) by mx.zoho.eu
  33. with SMTPS id 1642293058245779.6341876438877; Sun, 16 Jan 2022 01:30:58 +0100 (CET)
  34. DKIM-Signature: a=rsa-sha256; b=iBJJmjp/P6fmtItKTBxQrPrnvB9DdQe4wl8gFQ2oZSiYHdXN5Kp+CWAbP2tfnDnM7IPmqVn6m/h6K6tsniGqSy0cqzRi2cDNuPy4HEwRpQzAFpO1rU66jnBegrqSQEiOpqDhpdKjffPeiNjXnwUlReZ5jfumzlLhBUpNu/Q2NPc=; c=relaxed/relaxed; s=30141451; d=notifications.zohosheet.eu; v=1; bh=HI/cEd6HL1apQjKDwMrN3xLTtPOZNa3Z+7h1/aCYHFo=; h=date:from:reply-to:to:message-id:subject:mime-version:content-type;
  35. DomainKey-Signature: a=rsa-sha256; q=dns; c=nofws; 
  36.   s=30141451; d=notifications.zohosheet.eu; 
  37.   h=date:from:to:message-id:subject:content-type; 
  38.   b=hg/D6ywEYobi8Z/FstLDkJftghavoqgKvcDKhwO45oK4oY4l0oAzi1oHLcKAHzwwvev/TLCfKDff
  39.     XsjNseCzEB64cDYHxSP9I7pVLnggnqYeL3M0ptoWm8UlSNOykvKDFTlCj3gTpk+19f/SwLFa38r+
  40.     EJdbyL2JuOfwMlGmNoc=  
  41. Date: Sun, 16 Jan 2022 01:30:58 +0100 (CET)
  42. From: 16@kaneriskolav.ru
  43. Sender: 16=kaneriskolav.ru@notifications.zohosheet.eu
  44. To: user@inbox.lv
  45. Message-ID: <13ef.4aba32b06.m1.925b4e60-7663-11ec-bf10-525400b65433.17e604b5646@notifications.zohosheet.eu>
  46. Subject: LT 3 U 2 G 82
  47. MIME-Version: 1.0
  48. Content-Type: multipart/mixed; 
  49. boundary="----=_Part_2098134_91877389.1642293058183"
  50. Original-Envelope-Id: 13ef.4aba32b06.m1.925b4e60-7663-11ec-bf10-525400b65433.17e604b5646
  51. X-Transmail: transmail
  52. X-Report-Abuse: <mailto:abuse+13ef.4aba32b06.m1.925b4e60-7663-11ec-bf10-525400b65433.17e604b5646@zeptomail.eu>
  53. TM-MAIL-JID: 13ef.4aba32b06.m1.925b4e60-7663-11ec-bf10-525400b65433.17e604b5646
  54. X-JID: 13ef.4aba32b06.m1.925b4e60-7663-11ec-bf10-525400b65433.17e604b5646
  55. X-App-Message-ID: 13ef.4aba32b06.m1.925b4e60-7663-11ec-bf10-525400b65433.17e604b5646
  56. X-Zoho-Virus-Status: 2
  57. X-ZohoMailClient: External
  58. X-KLMS-Rule-ID: 1
  59. X-KLMS-Message-Action: clean
  60. X-KLMS-AntiSpam-Lua-Profiles: 168445 [Jan 21 2022]
  61. X-KLMS-AntiSpam-Version: 5.9.20.0
  62. X-KLMS-AntiSpam-Envelope-From: noreply+925b4e60-7663-11ec-bf10-525400b65433_vt1@notifications.zohosheet.eu
  63. X-KLMS-AntiSpam-Rate: 0
  64. X-KLMS-AntiSpam-Status: not_detected
  65. X-KLMS-AntiSpam-Method: none
  66. X-KLMS-AntiSpam-Auth: dmarc=none header.from=kaneriskolav.ru;spf=pass smtp.mailfrom=notifications.zohosheet.eu;dkim=pass header.d=notifications.zohosheet.eu
  67. X-KLMS-AntiSpam-Info: LuaCore: 471 471 a0b7c4b8d99a2515468eb16a27471247d002cf6c, {rep_avail}, {Tracking_smtp_not_equal_from}, {Tracking_uf_ne_domains}, {Tracking_marketers, three}, {Tracking_from_domain_doesnt_match_to}, {Tracking_smtp_domain_mismatch}, ApMailHostAddress: 31.186.226.196
  68. X-MS-Exchange-Organization-SCL: -1
  69. X-KLMS-AntiSpam-Interceptor-Info: scan successful
  70. X-KLMS-AntiPhishing: not scanned, disabled by settings
  71. X-KLMS-AntiVirus: Modern antivirus of Inbox, version 8.0.3.30, bases: 2022/01/21 08:05:00 #18402293
  72. X-KLMS-AntiVirus-Status: Clean, skipped