Vendor Intelligence Report: Shanxi Qianyecao Biotech QYC

Executive summary

Across 100 Finnrick lab tests, Shanxi Qianyecao Biotech QYC posts 75 pass and 25 fail, an overall pass rate of 75%. The record is uneven rather than uniformly poor: GHK-Cu is the strongest signal in the set and Tirzepatide is comparatively usable with fill-accuracy caution, while Tesamorelin is weak and BPC-157 is the clearest current avoid. Retatrutide has the deepest test history, but the full report explains why its pass rate does not remove the lot-by-lot risk.

The main safety issue is not simply low purity. QYC’s Finnrick record includes complete identity failures and large fill swings, so ratings fall under stricter grading that penalizes quantity and traceability problems. For an injector, that distinction matters: a vial can contain the right compound and still not support the dose implied by its label.

Corporate diligence adds a separate credibility problem. QYC’s site presents a decade-plus footer claim, but WHOIS, Wayback, B2B listings and forum chronology point to a much newer public footprint. The public materials show sales staff and a Taiyuan office-style address, not a verified production plant, and ownership remains obscured by third-party domain registration and shared hosting with another peptide site.

Operational risk is also broader than the peptide catalog. QYC advertises steroid oils and tablets in bodybuilding channels, and it announced PayPal was no longer available before moving buyers toward lower-recourse payment rails. The report also documents a same-community impersonation scam, public staff-contact anchors, and a narrow Reddit/Peppys referral pattern that should not be confused with neutral product evidence.

Inside the full report:

• Per-product pass/fail rates, rating trajectories and methodology-divergence charts for all 5 tested products
• Finnrick case notes on identity failures, underfills, overfills, endotoxin coverage and batch traceability
• WHOIS, Wayback, ECHEMI and LookChem evidence comparing QYC’s 2010 footer claim with its public launch record
• Corporate identity, staff-contact and infrastructure mapping, including the Mei-Peptide shared-hosting lead
• Payment-channel, impersonation-scam and authenticity-control analysis for Peppys, GLP-1 Forum and QYC’s own site
• Regulatory-risk review of QYC’s steroid marketing and customs/payment exposure

Risk assessment

• BPC-157 identity and fill-failure risk — high: BPC-157 is QYC's weakest tested product: 7 tests, 2 pass / 5 fail, 38.91%, with two zero-BPC-157 identity failures and a -52.1% underfill.
• Retatrutide substitution and fill-variance risk — high: Retatrutide has 49 tests, 38 pass / 11 fail, 77.35%, but includes one zero-Retatrutide identity failure and a +36.0% overfill.
• Tirzepatide fill-variance risk — medium: Tirzepatide is comparatively better at 80.42% with 21 tests, 17 pass / 4 fail, but field extraction recorded severe fill deviations including -46.0%.
• Tesamorelin reliability risk — medium: Tesamorelin sits at 53.77% with 11 tests, 7 pass / 4 fail, making it a weak QYC choice despite no documented identity substitution in the supplied record.
• Misleading operating-history risk — high: QYC's site implies a 2010 footprint; WHOIS, Wayback, ECHEMI/LookChem and forum records place the operation in the 2024 cohort.
• Controlled-substance and customs-exposure risk — high: QYC publicly advertises steroid oils and tablets alongside peptides, increasing enforcement and seizure exposure for buyers.
• Payment-recourse risk — medium: QYC announced PayPal was unavailable in late 2025; remaining crypto and Western Union methods give buyers little chargeback recourse.
• Ownership and infrastructure-opacity risk — medium: Beneficial ownership was not verified; qianyecao.cn is registered through a third-party web firm and shares Hong Kong hosting with meipeptide.cn.
• Impersonation and weak authenticity-controls risk — medium: A qianyecaolab@gmail.com scam was documented; reviewed records did not show a robust reseller list, anti-counterfeit system, or consistently traceable batch labels.
• Undisclosed platform-referral promotion risk — medium: Two Reddit accounts shared the same Peppys invite link without disclosure; the scan did not verify paid compensation but did identify partner/owner signals.