
Snap.. Forgot his traffic was being intercepted, not his DNS queries.. Shoots my theory in the butt.
Right, I think this guy may need to check what his DNS servers are set to. Attempting to use my Comcast DNS servers (Much like all the others here on the Slashdot), I get NXDOMAIN results back for fake domains.
Doing a quick search online for Earthlink DNS servers, I came back with one at 207.217.126.81. Running a query against this server (From inside and outside Comcast's network) returns the 207.69.131.9 & 207.69.131.10 IPs.
Unlikely to be a Comcast issue, maybe more of a PEBKAC issue.
Beware of all enterprises that require new clothes, and not rather a new wearer of clothes. -- Henry David Thoreau