use `https` for fundraising image