It's on the regular ShieldsUp! link here: »www.grc.com/default.htm
I'm SUPER GLAD to see Steve is seeing the inability to directly link is really clumsy so look for that to change soon.
There's bad assumptions about what it does and right now the button is named named "GRC's Instant uPnP Exposure Test"
. It's looking for the specific bad case when an internet connection responds to the uPnP query like a router would on the LAN. It does NOT detect if uPnP is on and working normally on the LAN, as it should only be. Exposure of this to the world (the WAN side) was never intended and represents a total botching of uPnP implemented on a device.
Anyone see a positive scan? It should reveal the uPnP details of the device that responds.
Last... Steve continues to tweak as we speak. So don't be surprised if it burps.