provide a copy of one of pages.
Javascript validation is not intended as a means of preventing bots from filling in forms. It is intended to give the user feedback while filling in the form.
Server validation is the means to use to prevent bots from spamming your form. make sure that the server validation behavior and the Universal Email behavior are both using the same trigger. if they use different triggers, it can be possible to work around the validation but still send the email.
NOTE: you also posted in another thread. Posting the same problem in multiple places causes confusion, it is best to start your own thread for issues to have them resolved.