[19:45:34] [W From] [Blîzzard-Lig]: [Blizzard Entertainment] GM: We depth investigation abnormal account. Please visit: [REMOVED_URL] We require verification that you are the primary account holder, otherwise we will suspend your account.
[19:46:22] Complaint Registered.
[19:47:32] [55:Blîzzard-Lig]: Level 55 Undead Death Knight - Plaguelands: The Scarlet Enclave
Using Core v8.0.7 and levels plugin 8.0.0

The phisher was on a connected realm.

This isn't a bypass. BadBoy_Levels can only block whispers from people on your realm, or from connected realms. It cannot block from all cross realms which I assume is the source of this.

I have forwarded the URL to the appropriate authorities.

My mistake, it doesn't support any realm that isn't your own, as there's no way to separate connected realms from cross realms to my knowledge.