DNS resolution starts at the stub resolver (your OS). If not cached, it queries a recursive resolver (1.1.1.1, 8.8.8.8). The recursive walks the hierarchy: root server → TLD server (.com) → authoritative server (example.com).
Each step has a TTL; cached answers skip the walk. With a 60-second TTL, the second lookup within 60 s is instant; after that, the walk repeats.