I am also testing in sandbox environment, is this might be the reason?

what is the complete URL do you end up getting?