Next.js is a React framework for developing single page Javascript applications.
Detection looks at response headers, cookies, javascript globals, inline scripts across 5 fingerprint rules among the site's public responses.
01
Websites using Next.js
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying Next.js. Individual fingerprint rule bodies are proprietary and are not published.
- Response headers
- Cookies
- JavaScript globals
- Inline scripts
03
Example public indicators for Next.js
Illustrative indicators derived from public catalog metadata for Next.js. A live scan may match additional proprietary rules beyond these examples.
- x-powered-by: Next.js ??
- NEXT_LOCALE
- __NEXT_DATA__
- next.version: .
- .next.react
04
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known Next.js signature (5 rules) at the time of the scan.
- Does not establish
- A sitewide install of Next.js, an active vendor contract, exclusive use, or that Next.js is still in place today.
05
How to check a site for Next.js
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest Next.js signals.
- 2. PluginView reads only public responses (response headers, cookies, javascript globals) and scores them against the Next.js signature set (5 rules).
- 3. Review the confidence score and text explanation for Next.js on the results page.
06
Commonly implies
07
FAQ: detecting Next.js
- Can PluginView detect Next.js without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for Next.js — typically response headers, cookies, javascript globals, inline scripts. It does not bypass authentication or paywalls.
- What category is Next.js?
- Next.js is classified under JavaScript frameworks, Web frameworks, Web servers, Static site generator in the PluginView directory.
- How many fingerprint rules cover Next.js?
- This reference currently tracks 5 fingerprint rules across response headers, cookies, javascript globals, inline scripts. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses Next.js?
- Illustrative public indicators for Next.js include x-powered-by: Next.js ??; NEXT_LOCALE; __NEXT_DATA__. A live scan may match additional proprietary rules beyond these examples.
