Was this email forwarded by a filter?

I'm having problems where email is showing up in an account that it is not being sent to.

Email was sent from a PHP form with the intended recipient of [email protected] but the emails keep showing up at [email protected]

Is there any way to tell if this is being caused by a filter or something at the ymail address that is automatically forwarding stuff to the earthlink address?

The headers are below.

Retu-Path: <[email protected]>
Received: from mx-collie.atl.as.earthlink.net ([207.69.195.165])
    By mdl-increase.atl.as.earthlink.net (EarthLink SMTP Server) with SMTP id 1BwNwk4S13Nl36Z0; Mon, 8 Aug 2016 12:35:20 -0400 (EDT)
Received: from gateway30.websitewelcome.com ([192.185.184.48])
    By mx-collie.atl.as.earthlink.net (EarthLink SMTP Server) with ESMTP id 1BwNwh1Lj3Nl36t0
    For <[email protected]>; Mon, 8 Aug 2016 12:35:17 -0400 (EDT)
Received: from cm6.websitewelcome.com (cm6.websitewelcome.com [108.167.139.19])
    By gateway30.websitewelcome.com (Postfix) with ESMTP id 008C791633ED6
    For <[email protected]>; Mon,  8 Aug 2016 11:35:17 -0500 (CDT)
Received: from gator3055.hostgator.com ([50.87.144.71])
    By cm6.websitewelcome.com with 
    Id UgWE1t00o1YeXdN01gWFaV; Mon, 08 Aug 2016 11:30:16 -0500
Received: from wrongaddressd by gator3055.hostgator.com with local (Exim 4.86_1)
    (envelope-from <[email protected]>)
    Id 1bWnRO-000NER-8M; Mon, 08 Aug 2016 11:30:14 -0500
To: [email protected]
Subject: xyz.co Submit Photos Form
X-PHP-Script: xyz.co/index.php for 107.184.251.12
Date: Mon, 8 Aug 2016 11:30:14 -0500
From: "xyz.co" <[email protected]>
Reply-To: [email protected]
Message-ID: <[email protected]>
X-Mailer: PHPMailer 5.2.14 (HTTPS://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: multipart/mixed;
    Boundary="b1_01a6444b3a63208e4aefc06f6ed76231"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator3055.hostgator.com
X-AntiAbuse: Original Domain - earthlink.net
X-AntiAbuse: Originator/Caller UID/GID - [31454 500] / [47 12]
X-AntiAbuse: Sender Address Domain - ymail.com
X-BWhitelist: no
X-Source-IP: 
X-Exim-ID: 1bWnRO-000NER-8M
X-Source: /opt/php54/bin/php-cgi
X-Source-Args: /opt/php54/bin/php-cgi /home2/wrongaddressd/public_HTML/index.php 
X-Source-Dir: xyz.co:/public_HTML
X-Source-Sender: 
X-Source-Auth: wrongaddressd
X-Email-Count: 5
X-Source-Cap: bHVjaWFkO2x1Y2lhZDtnYXRvcjMwNTUuaG9zdGdhdG9yLmNvbQ==
X-ELNK-Received-Info: spv=0;
X-Authentication-Results: dkim="fail"; (2:no or failed dkim processing); dmarc="reject"; (3); dwl="miss"; den="not exempt"
X-ELNK-AV: 0
X-ELNK-Info: sbv=1; sbrc=-0; sbf=CB; sbw=000;

Recent Questions...