Website and white paper aren't enough to spot bad projects or programs or ICOs or whatever it is as everything can be copied and fake stuff that they're too good to be true. Good ICOs are hiring good bounty campaign managers like higher rank accounts. Check their Telegram channels, social media pages, and team, if their channel has many active members then they're good ICO otherwise stay away from them so that you'll not waste your time.