WebVetted
+ New  

WebVetted Social OSINT Intelligence Report β€” @ESECtrainingDan

Generated: Jul 25, 2026

ESECtrainingDan Profile Picture

ESECtrainingDan

Person

Bottom Line Up Front

@ESECtrainingDan appears to be a real, public X account tied to a U.S.-based individual using the name Dan G. The account looks active, long-running, and consistent with a personal/professional profile in emergency services education and infosec. I do not see strong signs of impersonation or scam behavior, but the identity is only moderately resolved because the profile name is generic and the linked website provides the strongest external tie-back.

Key Judgments

The account is likely authentic and not an obvious impersonation.

Likely Moderate Confidence

The subject is probably connected to emergency services training and related technical topics.

Highly likely Moderate Confidence

The linked website and contact details appear operational and externally consistent with the account.

Likely Moderate Confidence

Risk Assessment

24%
Low Risk

Analytic confidence in this assessment is moderate.


Identity resolution

Live Intel Map

Resolved Primary Identity

Dan G / likely Dan Greenhaus

Assessment

The X account is publicly named Dan G, but the strongest outside link points to Dan Greenhaus. The handle @ESECtrainingDan, the EmergencyServicesEducators website, and a public PDF mentioning Dan Greenhaus with the same Twitter handle all support that attribution. The evidence is good enough for a moderate-confidence identity resolution, but not strong enough to call it fully verified without a direct self-claim or additional corroboration.

Resolved Identifiers

username

ESECtrainingDan

full name

Dan G

full name

Dan Greenhaus

organization

Emergency Services Educators

website

EmergencyServicesEducators.com

email

t*******@emergencyserviceseducators.com

Reveal

phone

732-354-1027

location

North Carolina, USA

Online presence

Dan G

twitter • Public

Location: North Carolina, USA
Category: Information Technology Company
Created: 2019-02-09

Linkage Basis:

  • Username matches known handle
  • Profile bio matches subject domain and topics
  • Website and PDF tie the same handle to Dan Greenhaus
  • Profile location and business context are consistent
Location: United States
Category: Training / education

Linkage Basis:

  • Website lists contact details used to pivot back to the subject
  • Website is directly referenced by the X bio
  • Public documents associate the handle with Dan Greenhaus
Category: Consulting / training

Linkage Basis:

  • Listed on the linked website as an associated social account
The Prehospital Classroom

instagram • Public

Category: Education / training

Linkage Basis:

  • Listed on the linked website as an associated social account
Unknown

linkedin • Public

Category: Professional profile

Linkage Basis:

  • Listed on the linked website as an associated social account

Search 15B+ breach records for @esectrainingdan

Search 15B+ breach records to see whether this username has exposed connected emails, passwords, or leaked account data.

  • Billions of records
  • Pivot to new identities

Target Alias

@esectrainingdan

Account OSINT

Top Associated Accounts

The network centers on a small professional brand with a few linked social accounts and a broader repost network around emergency services, cybersecurity, and Israel-related news. The strongest real-world association is the Emergency Services Educators brand. Most other ties in the X timeline are content affinities, not confirmed personal connections.

E

Emergency Services Educators

organization

website / brand

"This looks like the subject’s primary professional brand and the main hub for contact details and linked accounts."

E

EmergencyServicesEducatorsConsultants

organization

Facebook

"Listed as a linked social account on the website, so it is probably part of the same managed presence."

t

theprehospitalclassroom

organization

Instagram

"Listed on the website as an associated Instagram presence."

g

gotliebw

organization

LinkedIn

"This is only a linked URL on the website; the provided evidence does not fully explain whether it is a personal or organizational profile."

E

Eyal Yakoby (@EYakoby)

repeat_interaction

X reposts

"Frequently amplified in the sample, but this indicates topical affinity rather than a confirmed personal relationship."

H

Hillel Fuld (@HilzFuld)

repeat_interaction

X reposts

"Repeatedly boosted in the sample; likely reflects aligned commentary interests."

A

AIPAC

repeat_interaction

X reposts

"Content alignment is visible, but there is no evidence of direct relationship."

I

Israel (@Israel)

repeat_interaction

X reposts

"A topical news account that the subject reposts; this is not proof of a real-world tie."

Who is ESECtrainingDan associated with?

Reveal the Twitter accounts ESECtrainingDan is connected to and interacts with most.

Reveal Associates »

Account Timeline

The account is active but not highly prolific. It mixes reposts with occasional original remarks, and the visible posting pattern suggests steady curation rather than constant self-authored commentary.

Account Created

2019-02-09 01:12:35 UTC

This is a long-lived account rather than a newly created profile.

Username Change

Username changed 2 times; last changed at 2019-02-09 21:39:38 UTC

The username has been stable for years after an early adjustment.

Latest Post

Most recent visible tweet in the sample is from 2026-05-25

The account is active in the current period, not dormant.

Activity Gap

Visible sample spans 2025-07 through 2026-05

The account shows recurring activity over at least several months.

Interactive Graph

Map the full network.

Switch to the interactive workbench to trace relationships, aliases, and connections instantly across 719 intelligence signals we gathered.

Intelligence gathered

Strong Identifiers And Pivots

  • The handle @ESECtrainingDan is stable and the X account was created on 2019-02-09.
  • The bio links to EmergencyServicesEducators.com, which exposes a direct email address and phone number.
Intelligence Gaps 2
  • No direct self-written full name on the X profile beyond Dan G.
  • No independent government or corporate record was provided to fully verify Dan Greenhaus as the legal identity.

Weak Identifiers And Background Markers

  • The profile says it is based in North Carolina, USA, and the account is using a U.S. app store source.
  • The bio references firefighting, EMS, infosec, and IT, which suggests a public-interest training and technical background.
Intelligence Gaps 2
  • No employment history or education history was provided in the evidence set.
  • No reliable follower demographics were available.

Account Attribution And Identity Linkage

  • The X account and the emergencyserviceseducators.com website reinforce each other through matching branding and contact details.
  • The strongest extra-platform identity clue is the Dan Greenhaus mention in a public PDF that also references @ESECtrainingDan.
Intelligence Gaps 2
  • There is still a small naming gap between 'Dan G' on X and 'Dan Greenhaus' in the external PDF.
  • No direct statement from the account explicitly confirming the full legal name was captured.

Online Presence And Platform Activity

  • Recent activity is a mix of original complaint-style posts and a larger volume of reposts on cybersecurity, emergency services, and Israel/Gaza-related topics.
  • Engagement on recent posts is modest, with follower count at 163 and most tweets receiving low visible interaction.
Intelligence Gaps 2
  • Timeline sampling is limited to the latest posts, so long-term content balance may differ.
  • No audience quality or bot-analysis dataset was provided.

Behavioral Markers And Preferences

  • The subject appears interested in emergency services, cybersecurity training, reverse engineering, and news commentary.
  • The posting style leans heavily on reposts of other users’ content, suggesting curation and signal-boosting over frequent original authorship.
Intelligence Gaps 2
  • No evidence of direct sales pitches, scams, or credential phishing in the sampled content.
  • No private-message behavior was available.

Temporal Markers And Activity Windows

  • Account creation is dated 2019-02-09, giving it a multi-year lifespan.
  • The available tweet sample shows activity across late 2025 and spring 2026, so the account is recently active.
Intelligence Gaps 2
  • No precise daily activity window was extracted from the available data.
  • No evidence of long inactivity gaps or sudden identity shifts was provided.

Best next moves

Risks & recommendations

Identified Risks

4 risks

⤷ 4 additional risks found in this analysis

Impersonation risk

Unlikely

Low to moderate risk that a third party could copy the generic 'Dan G' presentation, but the current profile itself does not look like a clone.

Horizon: Near-term

Reputation / credibility

Likely

The subject posts strong political and topical commentary, which can polarize audiences and affect perceived neutrality.

Horizon: Mid-term

Contact exposure

Likely

The linked website exposes email and phone contact details, which improves accessibility but also increases spam and phishing exposure.

Horizon: Near-term

Audience authenticity

Likely

The account has only 163 followers and modest visible engagement, so influence is limited and the audience may be small or niche.

Horizon: Mid-term

Recommendations

2 actions

⤷ 2 recommended courses of action

Identity confirmation sweep

3 steps

Use the handle, website, and PDF reference together to confirm whether Dan Greenhaus is the same person as Dan G on X.

Open the linked EmergencyServicesEducators.com site and compare the contact details against the public PDF. Check whether Dan Greenhaus appears on any conference speaker pages, slides, or training bios using the same domain or phone number. A new source names a different full name.

Audience quality check

3 steps

Estimate whether the account’s followers and engagement are organic enough for trust decisions.

Sample followers for profile age, posting history, and obvious automation signs. Compare visible engagement on original posts versus reposts. Follower count changes sharply.

Data sources

Source Registry

8 sources
Source ID / Type Description Grading (Src/Info)
eval_1
social profile
X profile metadata for @ESECtrainingDan / Dan G
Coverage: Display name, username, creation date, follower/following counts, bio, location, website, account status, and profile settings
SRC A
INFO 1
eval_2
post
Recent X posts and repost activity for @ESECtrainingDan
Coverage: Recent tweet text, timestamps, and visible engagement metrics
SRC A
INFO 1
eval_3
website
EmergencyServicesEducators.com contact and linked-presence scrape
Coverage: Email address, phone number, and linked social accounts on the website
SRC B
INFO 2
eval_4
public record
WHOIS/DNS/SSL and security checks for emergencyserviceseducators.com
Coverage: Domain routing, mail setup, and basic safety signals
SRC B
INFO 2
eval_5
social search
Cross-platform search results for ESECtrainingDan
Coverage: Weakly related search hits across Instagram, LinkedIn, and YouTube
SRC C
INFO 3
eval_6
website
Search-engine existence check results for the handle and associated name
Coverage: Indexed X posts and a slide/PDF mentioning Dan Greenhaus and @ESECtrainingDan
SRC B
INFO 2
eval_7
metadata
Image-detection signal for the profile avatar
Coverage: Face-present signal and extremely low AI-generated/deepfake probability
SRC C
INFO 3
eval_8
website
Public PDF on raleigh.issa.org referencing Dan Greenhaus and @ESECtrainingDan
Coverage: Name/handle pairing and cybersecurity speaking context
SRC B
INFO 2

Follow Up Questions

Ask anything on 719 data points collected for ESECtrainingDan.

Suggested questions

Click a card to ask

Who is most likely behind @ESECtrainingDan?
Is Dan Greenhaus the same person as Dan G on X?
Are the account’s followers real and engaged?
What other profiles are linked to this account?
Are there signs of impersonation or cloning?
Analyst Briefing

Get answers grounded in the sourced data. Citations like will link to the evidence locker.

Evidence Locker
// Waiting for data ingestion...

Evidence Locked

This raw JSON payload contains sensitive intelligence data .

Unlock
719 data points collected