Nearly three weeks into one of the most extreme internet shutdowns in history, some of Iran's 92 million citizens are beginning to get back online - but access appears to be tightly controlled.
The country cut off internet access on 8 January, in what is widely seen as an attempt to stem the flow of information about a government crackdown on protesters.
Iranian Foreign Minister Abbas Araghchi said the internet was blocked in response to what he described as terrorist operations.
Now there is evidence that some internet access has returned - but independent analysis indicates much of the country is still effectively cut off from the outside world.
Iran's reformist Shargh newspaper has reported that some officials had claimed mobile internet had been restored. However, it said many users still do not have full access and can only connect intermittently and for very limited periods, often after repeated attempts.
Firms which monitor web traffic say there are signs of the internet being used inconsistently, raising questions about who is able to connect, and under what conditions.
What we're seeing isn't a return to normal, said Doug Madory, director of internet analysis at network intelligence firm Kentik. Major platforms are being allowed and blocked at different times during the day.
Independent internet monitoring group NetBlocks reported similar findings. Madory said the pattern could instead indicate authorities are testing a new system to block web traffic, with changes being made in real-time.
Amir Rashidi, director of cyber security at the Miaan Group said this points to only a certain number of people, who have been approved by the government, being the only ones with access.
Human rights organisations say this control over internet access has played a big role in limiting information about the crackdown on protesters. The Human Rights Activists News Agency (HRANA) said as of 26 January it had confirmed the deaths of 5,925 protesters, warning that the final toll could be significantly higher.
Intermittent connections
According to sources cited by Shargh, internet access in Iran has effectively been divided into multiple levels - ranging from a complete shutdown to normal access - with current connectivity still far from a full restoration.
Foreign messaging apps, including WhatsApp, will remain restricted, while local communication platforms are available but wrapped in security concerns.
In recent days, some users have reported intermittent connections to the outside world using services such as Google Meet, Telegram, Facebook Messenger or FaceTime.
However, Rashidi warns the evidence so far suggests the authorities are determined to prevent VPNs from operating and to keep control over who can connect.
Financial cost
After nearly three weeks of internet disruption, Iran's Minister of Communications Sattar Hashemi said daily losses caused by the shutdown have reached nearly five trillion tomans ($35 million; £25 million). Authorities seem to have introduced tightly controlled internet access for certain businesses as part of a broader strategy.
Business figures reported that in some cities members of the Chamber of Commerce are granted just 20 to 30 minutes of unfiltered internet access per day, strictly monitored and time-limited. Some businesspeople have been required to sign commitments not to send files related to the protests.
The situation is called effectively paralyzing and humiliating by those affected, generating widespread dissatisfaction among traders.
Internet freedom observers warn that the authorities are rapidly establishing new systems to cut Iran off from the international internet, suggesting that a complete restoration may never occur.
