Hi!
Does it happens the same if you try to navigate to a http site? Like vulnweb.com
Are you able to reach kali’s webserver from victim device by entering kali’s ip directly in browser?

Let me know.
Diego