An SMTP client introduces itself using EHLO, or HELO for basic SMTP.

A properly operated MTA normally presents a meaningful hostname consistent with its infrastructure.

Receivers can log or evaluate this identity, but EHLO alone is not cryptographic authentication. A client can claim a name.

Use it alongside connection IP, DNS, TLS, SPF and other evidence.

Reference material