OK. Then can you change your upstream server to 8.8.8.8 for testing. If you don't want to do it on your read server you can install one more NxFilter for testing. Test it without changing anything to see if safe-search enabled and then test it with your own upstream server.
And the other thing, you'd need to see this kind of log when you enable DEBUG mode.
DEBUG [2016-01-06 20:26:17] - ResponseCache, found a cached response for
forcesafesearch.google.com, old ttl = 21599, new ttl = 21545
You can enable debug mode on /nxfilter/conf/log4j.properties. INFO -> DEBUG.