you should first try to focus on bypassing anti virus detection, you can use something like themida or vmprotect for easy anti-vm and stuff like that. Tho it's not the most advanced way of bypassing anti virus detection.
if you're trying to do a website like a phishing page or something like that there is a lot of tutorial and templates available online