Our server has been compromised and I am looking a professional to help me resolve the problem. The following is what need to be done according to Linode staff.

Before opening this ticket we confirmed that the URL listed in the complaint was hosting a phishing site representing itself as Wells Fargo. This means that either the Linode was compromised or someone with authorized access intentional set this up. Either way in the case of phishing sites we must respond promptly, as these pages are designed to exploit sensitive data from customers of the companies being falsely represented.

This complaint is regarding the phishing site hosted on your Linode, not emails being sent. Please remove the offending content using Finnix Rescue Mode (http://library.linode.com/troubleshooti ... escue-mode) before rebooting, and confirm that your CMS is fully updated and patched.

I'd suggest starting from scratch. You can never know exactly what has been done.