If you have setup a Webhook then you know two things for sure.
- The domain of the shop calling you is in the header
- There is authentication information in the header you have to use
If you are not authenticating your webhook you're doing it wrong. So the short answer to determining which shop is calling you is to look inside the header for the domain.