The server rewrites the URL.
You could examine the code displayed by the browser or have a look in the
browser cache, or the image properties to find the actual address of the
image. It could help you to write the scan rules.