Not an attack, and it could be somehow useful to enforce the nostr: scheme. But there are legitimate cases where I want direct the user to a specific web client, ex. to showcase a problem or a good UI.

A good and transparent solution could be do the replacement and add a small hint that shows the original URL.

Or always use njump 👀😂