The short answer
To bypass a shortlink, run it through a tool that follows the redirects for you and shows the destination, such as Lewati, or use a shortlink skipper script that clicks through the pages inside your browser. Either way, it works when the destination can be read from what the shortener sends back, and it fails when the shortener only releases the link after a captcha, a login or a task done by a real person.
Knowing which kind of shortlink you are holding saves a lot of frustration, so that is where this guide starts.
The three kinds of shortlinks
| Type | Examples | How the destination is delivered | Can it be bypassed? |
|---|---|---|---|
| Plain redirect | bit.ly, s.id, cutt.ly, rb.gy, TinyURL | An HTTP redirect, sometimes after a preview page on free plans | Almost always, unless the host blocks bots |
| Ad-gated, pay per view | exe.io, ouo.io, adf.ly, shorte.st, bc.vc | After ad pages and a countdown, sometimes a captcha | Often, when the destination is present in the page or a redirect |
| Task or interaction gated | Linkvertise, Lootlabs, Work.ink, “subscribe to unlock” pages | After tasks, offers or steps tracked by the service | Rarely by server-side tools; specialised bypassers break often |
Plain redirect services are not trying to hide anything. Ad-gated services are businesses built on your waiting time: exe.io, for example, publishes a payout table per 1,000 views and only counts a view when the visitor stays at least 6 seconds with JavaScript and cookies on. Task-gated services go a step further and want proof that you did something before they let you through.
How a shortlink skipper actually works
There are two families of tools, and they work in opposite places.
Server-side resolvers
A resolver like Lewati requests the shortlink from its own server, not from your browser. It follows each HTTP redirect, then looks inside the returned page for the patterns ad-gated shorteners commonly use to carry the destination: meta refresh tags, URLs assigned in JavaScript, base64-encoded strings, data attributes and “continue” buttons. When it finds a destination that points somewhere other than the shortener, it shows it to you and stops.
The advantage is that your browser never loads the ad pages. The limit is equally clear: if the destination only exists after a person solves a captcha, there is nothing for the server to find.
In-browser skippers
Userscripts such as AdsBypasser or the Bypass All Shortlinks family run on the shortener’s page inside your browser. They click through intermediate pages, shorten or skip timers, and hide overlays. They can handle multi-step flows that a server cannot, but the ad page still loads, you still solve most captchas yourself, and the script needs permission to run on the sites you visit. We compare the main ones in our exe.io bypass alternatives guide.
How to bypass a shortlink with Lewati
- Copy the complete shortlink, including everything after the slash.
- Open lewati.web.id, paste it into the box and press Bypass.
- Read the Real URL on the result card. Check that the domain is what you expected.
- If the domain is unfamiliar, use the Safety Check buttons (VirusTotal, Google Safe Browsing, Sucuri, Norton, WOT, SiteAdvisor).
- Open the destination only if it passes both checks. If it is another shortlink, run that one through Lewati too.
For exe.io specifically, including what each failure message means, read how to bypass exe.io links safely. The supported links page lists the shorteners Lewati is set up for, including Indonesian services such as s.id, intip.in and ilang.in.
Why some shortlinks will never resolve
When a shortlink bypass fails, it is usually one of these:
- Interactive checks. A captcha, a login, or a timer the shortener verifies on its own server. No honest tool claims to beat these reliably.
- Bot protection on the host. Some shorteners sit behind Cloudflare challenges that block automated requests. Lewati reports these by name, for example for some TinyURL links.
- Login-only redirectors. t.co links can require a signed-in X (Twitter) session to reveal the target.
- Dead services and dead links. goo.gl is discontinued, and any shortlink can be deleted or expire.
- Rate limits. Many requests in a short time from one visitor get paused for a while.
A tool that never fails is either very narrow or is guessing. I would rather see “could not resolve” than a made-up destination.
Staying safe while you skip
The irony of shortlink skipper searches is that the results are full of sites that are worse than the shortener. Some rules that hold up:
- A bypass tool should never need you to download a program. Web tools work in the browser; userscripts install through a userscript manager.
- Ignore any page that asks you to allow notifications before it shows the result.
- Never paste a command into the Windows Run box, PowerShell or Terminal because a web page told you to. That is a malware trick, not a captcha.
- Read the destination before you open it. A skipper only removes the waiting; it does not make the destination safe. Our guide on checking whether a short link is safe covers this step in detail.
The creator side of shortlinks
People use ad-gated shortlinks to earn from what they share: mod files, study notes, game guides. When you bypass one, the sharer does not get paid for that visit. That is a fair trade-off to think about, especially for small creators in places where a few dollars per thousand views matter.
My own rule is simple. I check every shortlink before I trust it, because safety is not optional. When the destination is something genuinely useful from a person I want to support, I go back and open their link normally.
Frequently asked questions
What is the difference between a shortlink bypasser and a URL expander?
A URL expander follows plain HTTP redirects, which is enough for bit.ly or s.id. A shortlink bypasser also looks inside the pages of ad-gated shorteners such as exe.io or ouo.io, where the destination is not delivered as a simple redirect. Lewati does both.
Can I bypass shortlinks on Android or iPhone?
Yes. Lewati is a web page, so it works in any mobile browser with nothing to install. Copy the shortlink, open lewati.web.id, paste and press Bypass. Userscripts are harder on mobile because they need a browser that supports a userscript manager.
Why does my shortlink bypass keep failing?
The most common reasons are a captcha or login step the shortener checks itself, bot protection on the host, an expired link, a partially copied link, or a temporary rate limit. Lewati shows a reason with each failure so you know which one it is.
Does Lewati have an API for bypassing shortlinks in bulk?
No. Lewati is a free web tool for people checking links by hand, and it has no public API for third parties. Heavy automated use runs into the rate limit.