Vendor Intelligence Report: Coffee and Peppers

Published 3 Jul 2026. 28-page investigative report on who is behind Coffee and Peppers: corporate records, ownership, affiliate networks, and the vendor's lab-testing record. The first 4 pages are free to read on this page.

Researched and published by Finnrick Analytics. Reports draw on corporate records, affiliate-network analysis, and Finnrick's own laboratory testing record; vendors can challenge findings through the formal objections process at finnrick.com/vendor-support/objections.

Executive summary

Coffee and Peppers tests better than its paper trail reads. Across 30 Finnrick lab tests, Coffee and Peppers has 26 pass / 4 fail — an 87% pass rate. The signal is uneven: Retatrutide is the most defensible tested GLP product, Tirzepatide is directionally usable, GHK-Cu looks strong on a thin base, and BPC-157 is the clear avoid signal. The full report shows how these calls shift under stricter grading.

The non-lab record is where buyer risk sharpens. The storefront is live and tied to a Midway Grays continuity trail, but the public company layer is thin: a young domain, Cloudflare/WooCommerce infrastructure, no definitive legal entity in the searched records, a Gilbert PMB, and an incomplete California address with template-placeholder indicators.

The GLP line has a traceability problem. Archived and live pages capture Tirzepatide and Retatrutide moving through coded names around the FDA's June 2026 GLP-1 warning window, while two injectable label-control events sit in the record: a Finnrick strength correction and a COA-backed vial-code mismatch. The vendor response included store credit and a sticker-style fix rather than a clean quarantine-and-exchange protocol.

COAs and reputation need filtering. Kovera material is active, but Freedom Diagnostics brings unresolved independence and credential questions. Promotion is social and affiliate-led: a TikTok/Linktree funnel places Coffee and Peppers beside Petratide Science, and an affiliate-run Reddit community presents as discussion space. Positive reviews and community answers need discount-code context.

Inside the full report:

  • Per-product pass/fail rates, rating trajectories, and methodology-divergence charts for all 4 tested products
  • Wayback/live-site timeline of Tirzepatide and Retatrutide renaming into GLP-coded listings
  • Documentation of the April strength correction and June mislabeled-lot COA trail
  • Address, entity-search, domain, Cloudflare, and WordPress/WooCommerce infrastructure review
  • Kovera Labs and Freedom Diagnostics Testing verification analysis
  • Affiliate map covering Timothy Titus, @codeFortworth, r/greypeppersven, Now26-CP, and discount-code trails

Risk assessment

  • Injectable mislabeling and label-control risk — high: Two documented incidents affect GLP injectables: an April 2026 Tirzepatide 30mg-to-10mg correction and a June 2026 CP-2RT-labeled vial documented as Retatrutide / CP-3 RT.
  • GLP-1 product-name traceability risk — high: Tirzepatide and Retatrutide moved through CP-2 TZ / CP-3 RT to GLP2-TZ / GLP3-RT, obstructing lookup of old tests, COAs, dosing discussion, and complaints.
  • COA verification and lab-independence risk — high: Kovera is young and Freedom Diagnostics appears on recent COAs with a young footprint, 42,000+ COA claim, cross-domain email, and shifting signatories.
  • BPC-157 product-quality risk — high: BPC-157 is the weak product in the Finnrick record at 49.27%, with a Trustpilot illness report after isolating the vendor’s BPC-157.
  • Corporate traceability and address-opacity risk — medium: No definitive public legal entity surfaced; the site shows a Gilbert, AZ PMB and an incomplete 2357 Gordon Street, CA address with placeholder indicators.
  • Affiliate-promotion and review-distortion risk — medium: Affiliate-run Reddit activity, an undisclosed FORTWORTH X coupon link, and TikTok/Linktree code promotion can distort reputation signals.
  • Brand-confusion and authenticity-control risk — medium: Midway redirect, affiliate access links, Discord invite change, related-commerce links, and a lookalike-domain lead coexist without mature official-channel controls.
  • Transaction-recourse and support risk — medium: Public reports describe Zelle/Cash App fallback, incomplete or wrong orders, unanswered support, and rude Telegram handling; reversible recourse is not assured.