should these 2 sites be blocked??

[true indian]

See: https://www.virustotal.com/url/3fd734898d45227e284d2ea728c11aa5ef31f0720cfb746ad138946af6565a85/analysis/
Marked as phishing here: https://www.virustotal.com/file/7fc7474469cb8b6327165bdd670a37c8904252730c3550c721a92fc574ad6319/analysis/

Also: https://www.virustotal.com/url/eff325e73eefbe1f904b72a327a386e035e2200f22fa96c965a827c938d884a1/analysis/1338300817/
not detected by anybody:
https://www.virustotal.com/file/9c92b227ff2e9f38a1529883c04218ca9858d2f29a4c1d4578d1ef5541792397/analysis/1339690992/

are these real malicious sites?I found some malicious HTML data in the html format

[polonus]

The first example is a PHISH and as such could be blocked whenever found malicious.

The second example is more interesting:
wXw.facebook.com/r.php?invid=100003875482305&key=AQCQ52f5QLNpsb31llWxkGKiDHgVsgJeAy5eO283zPNNKrOX0nFbZ99q8WyyPoonTiaLmlDziQY4p-gaGPVZexSoHjM&_noscript=1&_noscript=1 benign
[nothing detected] (metarefresh) wXw.facebook.com/r.php?invid=100003875482305&key=AQCQ52f5QLNpsb31llWxkGKiDHgVsgJeAy5eO283zPNNKrOX0nFbZ99q8WyyPoonTiaLmlDziQY4p-gaGPVZexSoHjM&_noscript=1&_noscript=1
     status: (referer=wXw.facebook.com/r.php?invid=100003875482305&key=AQCQ52f5QLNpsb31llWxkGKiDHgVsgJeAy5eO283zPNNKrOX0nFbZ99q8WyyPoonTiaLmlDziQY4p-gaGPVZexSoHjM&_noscript=1)saved 32240 bytes fb451a96778006741d5cc3fa3853d12fe8515ddd
     info: [meta refresh] URL=wXw.facebook.com/r.php?invid=100003875482305&amp%3Bamp%3Bamp%3Bkey=AQCQ52f5QLNpsb31llWxkGKiDHgVsgJeAy5eO283zPNNKrOX0nFbZ99q8WyyPoonTiaLmlDziQY4p-gaGPVZexSoHjM&amp%3Bamp%3B_noscript=1&amp%3B_noscript=1&_noscript=1
     info: [script] static.ak.fbcdn dot net/rsrc.php/v2/yj/r/4-f92ka3ZrY.js
     info: [img] profile.ak.fbcdn dot net/hprofile-ak-snc4/161844_100003875482305_1325184765_q.jpg
     info: [img] static.ak.fbcdn dot net/rsrc.php/v2/yb/r/GsNJNwuI-UM.gif
     info: [decodingLevel=0] found JavaScript
     suspicious facebook profile tracking script

polonus