diff --git a/frontend/src/routes/remote-nodes/+page.svelte b/frontend/src/routes/remote-nodes/+page.svelte
index d77ef32..c99cb49 100644
--- a/frontend/src/routes/remote-nodes/+page.svelte
+++ b/frontend/src/routes/remote-nodes/+page.svelte
@@ -273,9 +273,8 @@
 				</li>
 				<li>
 					Malicious actors who running remote nodes <a
-						class="external"
-						href="https://w3-s3-jkt1.ditatompel.com/pub/assets/img/site-contents/monero-tx-fee-node.jpg"
-						target="_blank"
+						class="link"
+						href="/img/node-tx-fee.jpg"
 						rel="noopener">still can return high fee only if you about to create a transactions</a
 					>.
 				</li>
diff --git a/frontend/static/img/node-tx-fee.jpg b/frontend/static/img/node-tx-fee.jpg
new file mode 100644
index 0000000..e4e23db
Binary files /dev/null and b/frontend/static/img/node-tx-fee.jpg differ