Are you sure the email is getting sent from that page? With all of that security on it and still getting spam I think it is likely that you have another page somewhere without the security they are actually using to send the email and bypassing your security somehow and not actually getting through it.