At the very least the flashtool.net website appears to be the official one since it's linked in the top post of this immensely popular xda-thread so it's probably just a mistake by the person who maintains the website (especially since if someone took over the website for malicious purposes and changed the links to infected ones they could also have changed the md5sum to the infected version).