There's no way to find a legit ICO, it depends mostly on your luck. The best you can do is to look at the ICO's team and their experience, try to find them on LinkedIn or Rocketreach. Also read their whitepaper and decide if their idea is good. Moreover check ICO rating sites like icobench , icostats and icodrops