To be listed on MDL doesn't mean that a site isn't legit or is a criminal site.
It simply means that a specific url contains dangerous content and can harm others.
Many people don't understand this concept and ask why sites like google or rapidshare are listed on MDL.
We don't separate sites into good and bad, black and white, criminal and non-criminal.
Compromised sites are also mostly legit sites, but we list them as a warning, because it can harm other systems.
In case of
ha.ckers.org/files/tool25.dat
the url has been used for RFI attacks. Maybe there was no bad intention to put this file there, but it has been used for RFI attacks.
However, the file isn't available any longer and therefore I have removed this url from list now.