/etc/courier/webadmin/removed/ is in courier-webadmin 0.76.3-5+deb9u1.
This file is owned by root:root, with mode 0o755.