You must analyze all white paper. In addition, see also the road map, concepts and team profiles. If you want to make sure that the project is a legitimate project, you must see who the manager is. If the manager has experience in the ico project, then it can be said that the project is legitimate.