You can’t actually find legit ICOs unless after you participated in their campaigns or you’ve invested on it. The best way is to inspect the webiste, the company, and the bounty manager’s trust ratings here in the forum.