Nearly three weeks into one of the most extreme internet shutdowns in history, some of Iran's 92 million citizens are beginning to get back online - but access appears to be tightly controlled.
The country cut off internet access on 8 January, in what is widely seen as an attempt to stem the flow of information about a government crackdown on protesters.
Iranian Foreign Minister Abbas Araghchi said the internet was blocked in response to what he described as terrorist operations.
Now there is evidence that some internet access has returned - but independent analysis indicates much of the country is still effectively cut off from the outside world.
Iran's reformist Shargh newspaper has reported that some officials claimed mobile internet had been restored. However, it said many users still do not have full access and can only connect intermittently and for very limited periods, often after repeated attempts.
Firms that monitor web traffic say there are signs of the internet being used inconsistently, raising questions about who is able to connect, and under what conditions.
What we're seeing isn't a return to normal, said Doug Madory, director of internet analysis at network intelligence firm Kentik. Major platforms are being allowed and blocked at different times during the day.
Independent internet monitoring group NetBlocks reported similar findings. Madory suggested the pattern could indicate authorities are testing a new system to block web traffic, with changes being made in real-time.
Amir Rashidi, director of cyber security at the Miaan Group said this points to a system where only a specific number of people, approved by the government, can access the internet.
Human rights organizations say this control over internet access has played a significant role in limiting information about the crackdown on protesters. The Human Rights Activists News Agency (HRANA) has confirmed over 5,925 deaths among protesters as of January 26, with the final toll predicted to be significantly higher.
Internet rights observers report that the unrest has allowed authorities to accelerate previously planned efforts to tighten internet control, which would have faced greater resistance under normal conditions. Access in Iran is now effectively divided into levels, but remains far from full restoration. Some foreign messaging apps remain restricted.
Despite this, some users have reported intermittent connectivity to the outside world using services like Google Meet and Telegram. However, authorities appear resolute in preventing VPNs from functioning efficiently, aiming to maintain control over internet access.
After nearly three weeks of disruption, Iran's Communications Minister stated the daily financial losses from the shutdown are around five trillion tomans ($35m; £25m). Select businesses have been afforded limited internet access under tight controls, adding to the frustration and dissatisfaction among traders, as these measures seem designed to restrict connectivity further.
