diff --git a/net-analyzer/theHarvester/Manifest b/net-analyzer/theHarvester/Manifest
index 519afc58d..a81795b5c 100644
--- a/net-analyzer/theHarvester/Manifest
+++ b/net-analyzer/theHarvester/Manifest
@@ -1 +1,2 @@
 DIST theHarvester-4.3.0.tar.gz 856342 BLAKE2B 795d8c0d2db459b4e59d637ddcea297c1c3203bb2e34906e10c6b3eb04906ce584fc2d3fd39a75a378ebd467d193d305e2cecbdef11499f426ff3ed6406d142b SHA512 e4602bda5ada973d4985c9abd51a1e7380ba3bfa90dcf1c0627a459b69bba8723e11af1980d43a199a3d861010c5752d176f69fb764488bdb2740f3a284ff7f9
+DIST theHarvester-4.4.0.tar.gz 860656 BLAKE2B 4260ec4818f7cc0a84715d3f1ae5cfdb2112173326e211e0b97da377e20219448d6a3ac65ff95fe68dbf8d764e1a254922509ba12407b67cc94c7b7f52c09ed3 SHA512 d592cfa604464ce23f9d65458fab3ac7ac3cf42d6986e3e3dd29e6d0e2112ac4b876aea25e0ee10570542ded9f9ddc98e840d27ee5914ca0af9b5cf0df433b01
diff --git a/net-analyzer/theHarvester/theHarvester-4.4.0.ebuild b/net-analyzer/theHarvester/theHarvester-4.4.0.ebuild
new file mode 100644
index 000000000..bb053fcaa
--- /dev/null
+++ b/net-analyzer/theHarvester/theHarvester-4.4.0.ebuild
@@ -0,0 +1,85 @@
+# Copyright 1999-2023 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+DISTUTILS_USE_PEP517=setuptools
+PYTHON_COMPAT=( python3_{10..11} )
+
+inherit distutils-r1
+
+DESCRIPTION="The Harvester is a tool designed to collect email accounts of the target domain"
+HOMEPAGE="http://www.edge-security.com/theharvester.php"
+SRC_URI="https://github.com/laramies/theHarvester/archive/${PV}.tar.gz -> ${P}.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64"
+IUSE=""
+REQUIRED_USE="${PYTHON_REQUIRED_USE}"
+
+# RESTRICT="!test? ( test )"
+
+RDEPEND="${PYTHON_DEPS}
+	dev-python/aiodns[${PYTHON_USEDEP}]
+	dev-python/aiofiles[${PYTHON_USEDEP}]
+	dev-python/aiohttp[${PYTHON_USEDEP}]
+	dev-python/aiomultiprocess[${PYTHON_USEDEP}]
+	dev-python/aiosqlite[${PYTHON_USEDEP}]
+	dev-python/beautifulsoup4[${PYTHON_USEDEP}]
+	dev-python/censys[${PYTHON_USEDEP}]
+	dev-python/certifi[${PYTHON_USEDEP}]
+	>=dev-python/dnspython-2.1.0[${PYTHON_USEDEP}]
+	dev-python/fastapi[${PYTHON_USEDEP}]
+	>=dev-python/lxml-4.6.4[${PYTHON_USEDEP}]
+	dev-python/netaddr[${PYTHON_USEDEP}]
+	dev-python/ujson[${PYTHON_USEDEP}]
+	dev-python/pyppeteer[${PYTHON_USEDEP}]
+	>=dev-python/pyyaml-6.0[${PYTHON_USEDEP}]
+	dev-python/requests[${PYTHON_USEDEP}]
+	dev-python/retrying[${PYTHON_USEDEP}]
+	>=dev-python/shodan-1.28.0[${PYTHON_USEDEP}]
+	dev-python/slowapi[${PYTHON_USEDEP}]
+	dev-python/uvicorn[${PYTHON_USEDEP}]
+	dev-python/uvloop[${PYTHON_USEDEP}]
+
+	dev-python/starlette[${PYTHON_USEDEP}]
+	"
+
+DEPEND="${RDEPEND}"
+	# test? (
+	# 	dev-python/flake8[${PYTHON_USEDEP}]
+	# 	dev-python/mypy[${PYTHON_USEDEP}]
+	# )"
+
+# distutils_enable_tests pytest
+
+src_prepare() {
+	# network required for tests
+	rm -r tests || die
+	default
+}
+
+# hack: https://github.com/laramies/theHarvester/issues/1430
+# hack needs to symlink "new" location to old location to avoid violating PMS
+# * Package 'net-analyzer/theHarvester-4.3.0' has one or more collisions
+# * between symlinks and directories, which is explicitly forbidden by PMS
+# * section 13.4 (see bug #326685)
+
+python_install_all() {
+	dodir /etc
+	mv "${D}$(python_get_sitedir)/etc/theHarvester" "${ED}/etc" || die
+	rm -r "${D}$(python_get_sitedir)/etc" || die
+	dosym /etc/theHarvester "$(python_get_sitedir)/etc/theHarvester"
+	distutils-r1_python_install_all
+}
+
+pkg_preinst() {
+	# Fix the broken hack by keeping /etc/theHarvester as a directory not a symlink
+	# * Package 'net-analyzer/theHarvester-4.3.0' has one or more collisions
+	# * between symlinks and directories, which is explicitly forbidden by PMS
+	# * section 13.4 (see bug #326685)
+	if [ -L "/etc/theHarvester" ]; then
+		rm /etc/theHarvester
+	fi
+}