I want to make a solution that detect the main source of phishing attacks in email/sms, what should be my steps

There is no single "phishing detection solution" - the methods and phrasing of phishing changes all the time to get round detection methods; it evolves.

In the old days, it was simple: a pyramid scheme letter; a Nigerian prince; all fairly predictable. Now ... they have learned, they use psychology, the use poor English to separate those who are dumb enough to fool from those who aren't.

Do not rely on detection systems: use your intellect and ask yourself at all times "is this too good to be true?" - because if it is, it's almost certainly a scam of some kind!