legit-dga_domains.csv [1.6MB] : A zip’d CSV file of domains and a high level classification of “dga” or “legit” along with a subclass of either “legit”, “cryptolocker”, “goz” or “newgoz”. See Jay’s blog series for more information.
The dataset is from http://datadrivensecurity.info/blog/pages/dds-dataset-collection.html.