REcon [1] would probably get OP in closer proximity of who they're looking for

[1]: https://recon.cx