The router is set to user the caching server and then roll over to OpenDNS. Her phone showed 192.168.1.1 (home router) as the primary and 22.214.171.124 (Google) as the secondary. This was under DHCP settings. I had to switch it to static IP to be able to change the IP settings, but I got it to receive NXDOMAIN again that way.
But how could TWC’s DNS ever still come into the equation???
EDIT: I noticed my lookup server is down. That’s another matter, and looking into it. But still don’t see how that would allow TWC’s stuff to seep in.
Powered by WPeMatico