I suspect this is happening because of the way that alternate access
mappings work. If I understand it correctly AAMs are used when you
retrieve a hyperlink from the content database. But the picture isn't
being displayed as a link, its being displayed as an image so AAM is
never invoked. Another case of why the default mapping should probably
always be the most widely available address for the site.