I reviewed it and it seems that 443 is blocked for the sandbox.
❯ telnet devnetsandboxiosxec8k.cisco.com 443
Trying 131.226.217.182...
telnet: connect to address 131.226.217.182: Operation timed out
telnet: Unable to connect to remote host
I asked the sandbox team if they can confirm if 443 is blocked and if they can open it.
Also the auth for http was set to local, I configured it to use aaa (ip http authentication aaa) but this can be lost if the sandbox is reset.
One last comment, always check the urls used by the sandboxes instructions, the cat8k always on sandbox uses the url devnetsandboxiosxec8k.cisco.com you can find it here https://devnetsandbox.cisco.com/DevNet/catalog/Cat8k-Always-On_cat8k-always-on