It happens that confluence uses links like /download/thumbnails/attachment.png?version=1&modificationDate=1551265055986&api=v2 in image sources. They seem equivalent to /download/attachments/XXX links
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6)
If image attachments aren't displayed, see this article.