Warning signs detected
Legitimate SpeedTree software site compromised by payment-card-stealing malware affecting 428 users from March to August 2025. Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.
Is speedtree.com legit or a scam?
Legitimate SpeedTree software site compromised by payment-card-stealing malware affecting 428 users from March to August 2025.
These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.
Analysis Summary
MT Intelligence
SpeedTree is a genuine, award-winning software product originally developed by Interactive Data Visualization Inc. (founded 2000) and acquired by Unity Technologies in 2021. The domain is 26+ years old, hosted on legitimate infrastructure, and carries no antivirus detections. However, the evidence package documents a confirmed data breach: malicious code was injected into the checkout page between March 13 and August 26, 2025, stealing names, addresses, emails, and payment card numbers from 428 customers. Multiple Reddit users reported unauthorized charges of $600–$900 traced to this breach. Unity confirmed the incident, removed the malicious code, and offered credit monitoring, but the breach represents a material security failure on an active e-commerce page. The site remains operational and legitimate, but the recent compromise and ongoing user complaints about compensation lower trust significantly.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →
Visual Screenshot Analysis
We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.
Visual red flags detected in the screenshot
The page presents as a professional, well-designed Unity/SpeedTree product landing page with no visible scam indicators, urgency tactics, or deceptive UI patterns.
What our vision model saw
5 signalsPage displays the Unity engine branding and navigation (Games, Industry, Resources, Community, Learning, Support, Pricing) consistent with an official Unity product page.
SpeedTree product page with professional hero image of a procedurally generated flowering tree — high production quality design.
Download buttons for Windows, Mac, and Linux are present with consistent styling — no urgency or pressure tactics visible.
Product tier cards (SpeedTree Indie, SpeedTree Pro, SpeedTree Library) visible at bottom with consistent iconography.
No countdown timers, fake trust badges, pop-up overlays, or suspicious form fields detected.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for speedtree.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- speedtree.com is the official website for SpeedTree, a procedural vegetation modeling tool used in games and film, originally developed by IDV (founded ~2000 in South Carolina) and acquired by Unity Technologies in July 2021.
- In 2025, malicious code was injected into the SpeedTree checkout page from March 13 to August 26, resulting in a data breach affecting 428 customers; stolen data included names, addresses, emails, payment card numbers, and access codes.
- Unity confirmed the breach, notified affected users and authorities (including Maine AG), removed the code, disabled the site temporarily, and offered 12 months of credit monitoring.
- Multiple Reddit users in r/Unity3D reported unauthorized credit card charges ($600–$900) traced to the SpeedTree breach, with complaints about lack of direct compensation.
- SpeedTree has received a Scientific and Technical Academy Award (2015) and Primetime Emmy Engineering Award (2015); used in 40+ films including Avatar and many video games.
- Recent user discussions (late 2025–early 2026) mention website outages, licensing changes requiring Unity ID, and temporary unavailability of purchases, but the product remains actively developed (SpeedTree 10 released 2024).
- Software review sites (Capterra, G2) show positive ratings (4.8–5.0 in small samples) for vegetation generation tools; no widespread scam reports outside the 2025 breach.
- 80.lvopen
"Our investigation determined that the incident involved an unauthorized code that had been added to the check-out page of the SpeedTree website"
- Reddit r/Unity3Dopen
"Turns out, we all had our data stolen by a data breach with all data from on SpeedTree's end since March of this year. They charged my credit card $600-900"
- Security Affairsopen
"Malicious code on Unity Technologies's SpeedTree site skimmed sensitive data from hundreds of customers"
Originally Interactive Data Visualization, Inc. (IDV) founded 2000 in Columbia, South Carolina; acquired by Unity Technologies in July 2021; operates as part of Unity
SpeedTree.com is the official website for SpeedTree, a legitimate procedural vegetation modeling tool used in games and film. The product was originally developed by Interactive Data Visualization, Inc. (founded 2000 in South Carolina) and acquired by Unity Technologies in July 2021.
Critical Security Incident: In 2025, malicious code was injected into the SpeedTree checkout page between March 13 and August 26, resulting in a data breach affecting 428 customers. Stolen data included names, addresses, emails, and payment card numbers. Multiple Reddit users in r/Unity3D reported unauthorized credit card charges ($600–$900) traced to this breach. Unity confirmed the incident, removed the malicious code, disabled the site temporarily, and offered 12 months of credit monitoring. However, affected users have complained about lack of direct compensation.
Positive Reputation: SpeedTree has received a Scientific and Technical Academy Award (2015) and Primetime Emmy Engineering Award (2015). Independent review sites (Capterra, G2) show positive ratings (4.8–5.0 stars) for the software's vegetation generation capabilities. The product is actively developed (SpeedTree 10 released 2024) and used in 40+ films including Avatar and numerous video games.
Recent Issues: Late 2025 and early 2026 discussions mention website outages, licensing changes requiring Unity ID, and temporary unavailability of purchases, but the product remains operational.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Contact Verification
We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.
- No phone number listed on the page.
- No postal address visible on the page.
- Contact email on the site's own domain (sales@speedtree.com).
- Links to 11 social profiles.
Domain & Encryption
Redirect Chain
- 1301http://speedtree.com/
- 2200https://unity.com/products/speedtreecross-domain
Server Reputation
Scam-Type Likelihood
1 scam-type patterns detected
1 of 13 categories showed signals
We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.
- Page contains e-commerce copy (cart / checkout / shipping).
- No phone number or postal address anywhere on the page.
1 of 13 categories showed signals
We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.
- Page contains e-commerce copy (cart / checkout / shipping).
- No phone number or postal address anywhere on the page.
Fake-shop warning signs
Signals common to non-delivery scam shops were detected on this site.
- Treat speedtree.com as unverified
Do not enter credentials or send money until you have independently verified the business.
- If you already paid by card or PayPal — start a chargeback
Contact your bank or card issuer and dispute the charge as "goods not received" or "merchant fraud." PayPal users can open a case in the Resolution Centre. Act within 120 days for card chargebacks in most jurisdictions.
- Save every piece of evidence
Screenshots of the checkout, order confirmation emails, any chat transcripts, and the product listing page. Chargeback and fraud reports go faster when you have receipts.
- OpenReport the shop
Report to the FTC (reportfraud.ftc.gov), Action Fraud UK, or your local consumer-protection body. Post the URL on the MalwareTips scam forum so other buyers can find it.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review marked speedtree.com as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
- speedtree.com currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
- Yes. speedtree.com presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 44 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- speedtree.com is 26.9 years old, registered on 7/15/1999 through MarkMonitor Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 91 antivirus engines in our malware network report speedtree.com as clean.
- No. speedtree.com is not currently listed on the major browser blocklist feeds that modern browsers use.
- speedtree.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.