There is json log file. If you parsing the websites, then find some weird website name. Then find the name of user who searched that website.
flag is: iriscrf{name} (lost)