As shared with previous posters, you will be overwhelmed with ICO sites when you google them. So, in order to determine how legitimate the site is, I search their traffic in https://www.alexa.com/siteinfo I wouldn't say the most traffic is the key for the legitimacy, I believe it will give a bit of trust.