owi.com

HTML metadata

Title: Old World Industries homepage - Corporate - Old World Industries
Description: Old World Industries is built upon a 50-year history of American ingenuity. Community-focused yet globally positioned, the Northbrook, Illinois-based company is transforming the automotive, commercial, and chemical industries with innovative solutions that keep the world moving forward. Led by flagship brands PEAK®, BlueDEF® (Americas #1 DEF Brand), Final Charge®, and Thermal Charge®, Old World Industries prides itself on developing automotive and heavy-duty products for the most extreme climates and working conditions. Automotive aftermarket and OEM products and categories include antifreeze + coolant, diesel exhaust fluid (BlueDEF), automotive lighting, windshield wiper blades, rear wiper blades, windshield wash, heat transfer fluids, and more.
Language: en
Canonical: https://www.owi.com/

Open Graph

title: Meet Old World Industries | Corporate | Learn More - Corporate - Old World Industries
description: Meet OWI. We are focusing on our sustainability mission and vision by transforming the automotive, commercial & chemical industries with best in-class brands.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (7)

asset.productmarketingcloud.com×6
fonts.googleapis.com×3
purl.org×2
seal-chicago.bbb.org×2
fonts.gstatic.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Contact

Phone

Registration

Registrar

GoDaddy.com, LLC

Created

1995-01-20

Expires

2027-01-21 247 days left

Updated

2026-01-22

Name servers

ns-1275.awsdns-31.org
ns-147.awsdns-18.com
ns-1949.awsdns-51.co.uk
ns-572.awsdns-07.net

DNS records live

NS

ns-1275.awsdns-31.org
ns-147.awsdns-18.com
ns-1949.awsdns-51.co.uk
ns-572.awsdns-07.net

MX

0 owi-com.mail.protection.outlook.com

Email authentication strong

SPF

v=spf1 ip4:68.21.20.178 ip4:64.64.199.224/27 ip4:68.21.20.165 ip4:50.254.25.121 include:spf.protection.outlook.com include:_spf.salesforce.com include:dayforcehcm.com include:spf-us.emailsignatures365.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:postmaster@owi.com; ruf=mailto:postmaster@owi.com;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5lntqko3HC2cH5uu+QC4gBYDUTjBLMk+jqbmxyB+hkyGj5HfMK++tTHlSDO0nAGrcqdv/9w3oT932…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLU2PpzmwYrRw7hR+hbnRlF9dOu8a/3Q0iCii3PxTSbodlAFVUXow7xFeda9Qt/e0wZcaQdgveQpX8…

selectors probed

Certificate (current)

E8

from 2026-04-24 to 2026-07-23

Expires in 65 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.owi.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin
permissions-policy: geolocation=(self),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; default-src 'self' jobs.dayforcehcm.com; worker-src blob: 'self'; script-src 'self' 'strict-dynamic' 'nonce-m24uiql891aVhzRaz4K+jBnC88AIy/UKsUm2LS6BE/k='; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.plyr.io wc-forms.s3.amazonaws.com cdn.pricespider.com api.tiles.mapbox.com www.googletagmanager.com; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com cdn.plyr.io wc-forms.s3.amazonaws.com cdn.pricespider.com api.tiles.mapbox.com www.googletagmanager.com; font-src 'self' fonts.gstatic.com acsbapp.com; img-src 'self' data: blob: asset.productmarketingcloud.com a1.b0e8.com p.brsrvr.com www.facebook.com https://*.google-analytics.com media.whatcounts.com www.google.com asset-prod1a-use.productmarketingcloud.com maps.googleapis.com img.icons8.com maps.gstatic.com i.ytimg.com cdn.cookielaw.org network-a.bazaarvoice.com api.bazaarvoice.com display.ugc.bazaarvoice.com photos-us.bazaarvoice.com ad.doubleclick.net tags.w55c.net px.ads.linkedin.com insig
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: 'same-origin'
cross-origin-embedder-policy: 'require-corp'
cross-origin-resource-policy: 'same-site'