See 12 instances of it detected here: https://sitecheck.sucuri.net/results/edupai.web.id
Just one to flag it here: https://www.virustotal.com/nl/url/7e1ebc7474b4c5796169f095ca156f5df31f6a4ca9de8d4739ffb8e24e7ef9c0/analysis/1526240639/
and here: https://urlquery.net/report/5586ed9d-1960-4c38-af46-b5309a8a2751
See the source code for the https site: https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=edupai.web.id&ref_sel=GSP2&ua_sel=ff&fs=1
2 vulnerable jQuery libraries detected here: https://retire.insecurity.today/#!/scan/5ec9539cbf2202b11148e6f6da1a3ca356806132b77d55152fb8374134b7c88e
D-status and recommendations: https://observatory.mozilla.org/analyze/www.edupai.web.id
“undefined variable n”-error in wXw.republika.co.id/jadwal-sholat/js/jquery.min.1.11.j
with 43 sources and 19 sinks → http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwww.republika.co.id%2Fjadwal-sholat%2Fjs%2Fjquery.min.1.11.js - innerHTML triggering? see-> https://gist.github.com/caike/35522c3da161d29fc2ce
Blocked by Netcraft extension = Blocked URL: -http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwww.republika.co.id%2Fjadwal-sholat%2Fjs%2Fjquery.min.1.11.js/<img%20src=x%20onerror=%22alert(%27XSS%20Attack%27)%22%20%3E
but there were no sources to be abused here: Results from scanning URL: hxtp://www.republika.co.id/jadwal-sholat/js/jquery.min.1.11.js/<img src=x onerror="alert(‘XSS Attack’)" >
Number of sources found: 0
Number of sinks found: 240
polonus (volunteer website security analyst and website error-hunter)