Where on your site is your e-mail address?

It isn't, but there is a form handler and I think they've opened the PHP file to scrape the recipient.