Thank you for your reply
I need to check with my host, but since you mentioned it, mywebsite.com/wp-includes is still accessible and it shows the Forbidden page, and when I access mywebsite.com/systemfiles (which is supposed to be wp-includes) it shows 404 page.
Moreover, when I access mywebsite.com/wp-admin or the new path of admin access mywebsite.com/secret, in both cases it takes me to the admin login page (this works differently than wp-includes and both are wrong).
Does this information let you suspect anything further?
Please pardon my lack of knowledge in some technical details.
Thank you again