[kijin]

404 would also work, since the resource does not exist at the http: address.

[bruce511]

True, but 404 has trained us to look hard at the URL part, not the protocol part.

Whereas 403 or 400 are less likely to have so automated built-in handling on the client side.