The /webstat directory is automatically created for each site on the server by Webalizer, the stats program that we have running on the server. The directory is owned by the root user and cannot be deleted and even if it were it would be re-created again by Webalizer when it runs the next time. There is no way for us to turn off the webstat program for just one site on the server. If you are concerned about public access to that directory, you can setup password protection for that directory (be sure to choose the non-SSL option).