Block "goonsquad" and "goonsquad.co" and "goonsquad.com". It is actually goonsquad.co. When I was in the position of getting this stuff, the message said it was from SamualDrakey owner of goonsquad.co. So, block him, too. Note the misspelling of Samual. Also, look upward and use camera controls to search for the boxes. Go near them (after you block all those names). Send an Abuse Report to Linden Labs. It is under "help" on your inworld viewer. Fill in everything or they won't pay attention to it. Check the box in the upper left to send a picture with your AR. To fill in the name, use whatever name is on your messages or use SamualDrakey. Choose "choose", type the name in, let it search for it. Click OK. The rest of the form is pretty obvious. Good Luck.