The two main methods Let's Encrypt uses to validate whether you control a domain name are (1) using a TXT record in DNS to validate, called DNS-01, or (2) using DNS to look up the A/AAAA records and then using HTTP to that host, called HTTP-01.
In either event, it checks from multiple places around the world to confirm that you actually control the domain name throughout the visible Internet.