Only legit cloudminers I know are Genesis or Hashnest (from Bitmain). Some say Hashflare is legit, too, but I personally don't think all their contracts are backed with hashpower. Hashflares conditions are very bad with limited contracts to 1 year, high withdrawal limits and a ridiculous high maintenance fee. If they have really all the hardware, I don't know at which price they produce, but it's obviously they will shut down their service sooner or later. A few weeks ago the difficulty / BTC price rate was so bad, that fees were higher than profits. I wouldn't have been surprised if the contracts were cancelled by Hashflare.