Personally, I'd go for nds-card.com, it is a trusted website, and a sponsor of GBAtemp.
I've purchased quite a few flashcarts from there myself. A lot of them will work. I personally like the R4i-SDHC 3DS RTS from r4i-sdhc.com, but a number of other carts will do.