/admin (Status: 301) /backup (Status: 200) /robots.txt(Status: 200) /secret (Status: 200) Check /robots.txt → found Disallow: /hidden-login
Run Gobuster on /hidden-login :
Always start with a small wordlist for speed, then expand if needed. gobuster