https://www.hashnest.com/ is legit since they are owned by bitmain (antpool) but i don't suggest trying cloud mining specially now because the difficulty is very high and the chance of you getting ROI is almost zero
That's bull. You'll make ROI but after you've invested enough in significant mining power. You're not going to get much with 1 or 2 TH/s but 10 TH/s or 100+ TH/s if you play your cards right can net you a good chunk in 24 hours.
Also the price on BTC going up "kind of" negates the difficulty. Again you have to know what you're doing to avoid Difficulty cutting into your daily earnings.
Cloud mining is not for "newbies".
Hashflare.io works but I wouldn't suggest going with them right now because there is a lot of heavy traffic on their site due to them opening up Polybius a couple of weeks ago and it's causing the site to "502 Bad Gateway" a lot. Also the price of Bitcoin going up is causing people to rush to their site to buy hashrate and that's not helping the traffic jam problem at all.