Russia-based ICO Rating failed to disclose that its "ratings" of initial coin offerings were actually paid promotions.