Northline Labs Displays Fabricated Certificates of Analysis

Northline Labs shows a Certificate of Analysis for every product — lot number, ≥99% purity, passed safety assays. For 14 of 43 products none of it comes from a lab: the card is generated in the browser from the product's own code and name. The other 29 are real and independently verified.

---

Northline Labs’ certificate page presents every product it sells as lab-tested. Each one gets a card headed “Certificate of Analysis,” with a lot number, a purity figure, and a row of passed safety assays — endotoxin, heavy metals, residual solvents. Scroll the page and it reads as complete laboratory coverage across the whole catalog.

It isn’t. Behind that identical shell, the page ships two different things. Twenty-nine products open a genuine PDF from a real testing lab. The other fourteen open a card whose lot number, purity value, and “passed” results are invented on the spot by the website’s own JavaScript — computed from the product’s own code and name, with no underlying document anywhere. A shopper looking at the two side by side cannot tell them apart.

Note: This is a documented analysis of a vendor’s public storefront and its own front-end code, reproducible by anyone. It makes no claim about the actual purity of Northline’s products — only that, for the fourteen products named below, no certificate substantiates the panel the site displays. We describe what the site’s public code does; we make no legal determination and allege no fraud or violation of law. If Northline publishes real certificates for these products, the fabricated cards should come down and we will update this article.

Two kinds of card, rendered to look the same

The certificate grid at northlinelabs.org/coas/ is built by a single script. When a product has a real certificate on file, the script embeds the actual lab PDF and gives you a “View COA” / “Purity report” button you can open. When it doesn’t, the script falls back to a generated summary — and dresses it in the same “Certificate of Analysis” header, the same lot line, the same purity badge, the same tabbed assay panel.

The difference a normal visitor can see is simple: the real ones have a document you can open; the fabricated ones have nothing behind the panel. No PDF, no download, no lab named.

The evidence is in Northline’s own code

None of this requires guesswork — it’s spelled out in the site’s public theme script (assets/coa.js). Three small functions do the work (the inline comments below are ours):

// A fake lot number, built from the product-code digits + the length of the name
function lotOf(p) {
  var c = COA[p.slug];
  if (c && c.lot) return c.lot;                   // real cert on file → use its lot
  return 'NL-' + (p.code||'').replace(/[^0-9]/g,'')
       + '-' + (2600 + (p.name.length * 7 % 400)); // otherwise → invent one
}

// A default purity string when the product has no real spec
function purityFull(p) { return (p.specs && p.specs.purity) || '≥99% (HPLC verified)'; }

// Which "passed" assays to show — decided by a hash of the product code
function coaTests(p) {
  var h = hash(p.code), t = [];
  t.push({ label:'Purity',   value: purityFull(p) });
  t.push({ label:'Identity', value:'Confirmed' });
  if (h % 4 !== 0) t.push({ label:'Endotoxin',        value:'Within specification' });
  if (h % 3 === 0) t.push({ label:'Heavy metals',     value:'Pass' });
  if (h % 5 === 0) t.push({ label:'Residual solvents', value:'Pass' });
  return t;
}

Read plainly:

• The lot number is a string formula. NL-, plus the digits from the product code, plus (2600 + name length × 7, mod 400). It is not issued by any lab and maps to nothing.
• The purity is a hard-coded fallback. With no real spec, the card literally prints ≥99% (HPLC verified) — the words “HPLC verified” with no HPLC and nothing verified.
• The safety panel is theatre. Whether Endotoxin, Heavy metals, or Residual solvents shows a green “Pass” is decided by hash(product code) % n — arithmetic on the product code, not an assay result. (The little “chromatogram” drawn on the card is a single hard-coded shape reused for everything.)

The script branches on exactly this: where a real certificate exists it embeds the real PDF; otherwise it renders the generated assay-summary panels.

The fourteen products with no real certificate

In fairness: the other 29 are real

This is not a scam storefront with fake COAs top to bottom. Twenty-nine of Northline’s products carry genuine certificates — 48 documents in total, issued by Horizon Analytical and ILS Laboratories. We did not take those at face value either: each lot or report number resolves on the issuing lab’s own public verification portal, tied to Northline as the named client. All 48 checked out.

That is what makes the fabrication worth writing about. A vendor with real testing across most of its line still presents look-alike certificates for the products with no certificate on file, rendered pixel-for-pixel like the genuine ones. The problem isn’t the catalog — it’s the fabricated cards sitting next to the real ones with nothing to distinguish them.

How this squares with our vendor rating

Northline currently sits in our Strong trust band. That is not a contradiction — it’s the system working as intended. Our score is built only from evidence we can independently verify, so it rests entirely on the 29 products that carry real, lab-confirmed certificates. The fourteen fabricated cards earned nothing; they were logged as gaps, not counted as testing. A benchmark that credited a certificate no lab ever issued would be no benchmark at all.

If Northline replaces the fabricated cards with real certificates, their verified coverage — and their standing — should only go up. Until then, treat any Northline product not on a genuine, downloadable certificate as untested, whatever its card says. If you want to understand why a downloadable, lab-verifiable certificate is the only kind that counts, start with How to Read a Peptide COA and What Peptide Testing Can and Cannot Prove.

Common questions

Are Northline Labs' products fake or impure?

This finding makes no claim about the actual purity of any Northline product. It documents only that, for 14 products, the on-page Certificate of Analysis is generated by the website itself with no underlying laboratory document. A fabricated certificate is not evidence a product is bad — it is the absence of evidence that it is good.

How can I check this myself?

On northlinelabs.org/coas/, open a product that has a real certificate — it shows an embedded PDF with a 'View COA' button. Then open one of the 14 listed products, such as Epitalon or KPV: you get a lot number and green 'Pass' tabs, but no PDF, no download, and no lab named. That missing document is the tell.

Does this mean Northline is a scam vendor?

No. Twenty-nine of their products carry genuine certificates from Horizon Analytical and ILS Laboratories, and we verified all of them against those labs' own portals. The problem is that the site renders fabricated and genuine certificates identically, so a shopper cannot tell which is which.