The next time you type inurl:userpwd.txt into a search bar, you are looking at a list of ticking time bombs. Make sure your own domain isn't one of them. Check your web root today. Change those passwords. And never, ever put authentication data in a plain text file within the public web directory.
If you are a site owner and discover your files are exposed via this search: Delete the File: Userpwd.txt (and similar files like config.php.bak passwords.txt ) from the public web directory immediately. Rotate Credentials: Inurl Userpwd.txt
For a business or individual, appearing in the results of this search query is a critical security failure. The next time you type inurl:userpwd