If I understand correctly they setup 'https://twitter-unfurl-faker.herokuapp.com/'. When twitter creates the preview it uses a Twitter user agent so the website is returning different content (or a redirect). Then a non-twitter user agent is used to access 'https://twitter-unfurl-faker.herokuapp.com/' then it redirects to https://harrydenley.com/faking-twitter-unfurling/