It does try to access each URL. But they fail before it gets to the TLS handshake, so it never reaches the validation it's intended to test.
And then it reports the browser is safe. I presume they report every failure as a success and not only those where it fails during certificate validation.
A correct output would be:
- A successful connection is reported as unsafe
- A connection failed due to the TLS certificate is reported as safe
- A connection failed for any other reason is reported as inconclusive