You didn't look close enough at the mailto tags =)

Note that the domains listed in @domains are LOCAL domains to protect against, not domains referenced in the urls matched under it. This script is a honeypot, and unless the harvester is smart, they can't get out of it. It's completely self-reentrant.