[Zuider]

The Unicode letters could be darker, which would still be visible if you are color blind. If the highlighted characters were not ones that would be expected to be represented by Unicode, i.e. if they were not special characters or diacritics, than that should raise an alarm, especially if the user was familiar with how the genuine URL looked.

[sebastian]

Different colour + underlined.

[krallja]

All letters are Unicode.