Google "list of malware sites"...the results will be a lot of websites that track known malware distribution sites. Some may be stale, others are bound to be current.
Lol I tried that but when your looking for them you don't get em. Actually its for my brother. He plays with them in a vm. He just finished decompiled Stuxnet.