What exactly does ISP see if you have enabled/disabled VРN? Working on the game and need help!

I am making some art for the game about privacy and need to make an interface there ISP is checking logs of one of the users. Has anyone worked with any ISP or have screenshots of their interfaces?

As I know if you are surfing normally they will see domains like "cornhub.tld" and nothing else (no full URL?). And if you are connected to the VРN it will show only the VP(N) exit IP all the time, correct?

art disabled game interface isp logs making privacy screenshots working