The flag is everywhere. You just need to catch it.
Hint: Javascript doesn't make Defender angry enough.
The flag format is:
p4{letters_digits_and_special_characters}
.
If you have any questions, you can find our team-members at the IRC channel #p4team @ freenode .