https://www.hashnest.com/ is legit since they are owned by bitmain (antpool) but i don't suggest trying cloud mining specially now because the difficulty is very high and the chance of you getting ROI is almost zero
I can see on their site that all their mining power is sold out. (I'm not registered and that's what I can see from visiting the site). Is that correct?