Examples?
Time Warner Cable used to do it. I haven't checked since they became Spectrum.
There were certainly a number of ISPs in the UK that tested ways to inject ads in content in the 2000s, there was quite a hoo-hah about it in some forums. That was usually by modifying HTML content in transit via transparent proxies though, not DNS poisoning, but it shows that the intent exist{ed|s}. This is one of the reasons that HTTPS-everywhere is a good idea even if you aren't concerned about snooping in general.
Deutsche Telekom (largest ISP in Germany) did this, not sure if they still do or were ordered to stop by court yet
Comcast and/or verizon did it in the 2010s, there was an opt-out in the account dashboard.
It's sort of an absurd question, the prevalence of such things by ISPs was the literal impetus for DoH and DoT.