http://dtyzgbrlozogokiaidoaszcutfiwduzswxdghkd2snonicbux2xudkqd.onion/screenshots
When we look at the titlebar, we see “[qubes]”, which is the name of the actual domain. Theoretically, the untrusted application (here, the red Tor Browser running in a DisposableVM) beneath the prompt window could draw a similar looking window within its contents. In practice, this would be very hard, because it doesn’t know, e.g., the exact decoration style that is in use.