Whitepaper should be the first thing to give an insight of how legitimate a project is and the percentage  of tokens meant for the airdrop can hint on the legitimacy of a project.