A method of identifying and counteracting Internet attacks, of Man-in-the-Browser and/or Man-in-the-Middle and/or Bot attack types, comprising the steps of: - generating a request by a Web browser, concerning a Web application residing in a Web server, - sending said request by said Web browser to a box server, which is in signal communication with said Web server, - receiving a server DOM code by said box server, which code has been automatically generated by said Web server according to said request, characterized in that it comprises the steps of: - sending a service page code by said box server to said Web browser, in response to said request, said service page code comprising an obfuscated and polymorphic javascript code and/or HTML code, - receiving and rendering said service page code by said Web browser,- receiving and processing said javascript code and/or HTML code, by said Web browser, to automatically generate an asynchronous request, such that environment data of said Web browser may be transmitted to said box server and said rendered service page code may be transmitted to said box server, - processing said environment data of said Web browser, by said box server, to identify Internet attacks of the Man-in-the-Browser and/or Man-in-the-Middle and/or Bot attack types, - processing and comparing said rendered service page code and said service page code by an algorithm application residing in said box server, such that at least one code difference may be identified, and processing said rendered service page code to compare it with said service page code, by a comparison function of said algorithm application, to thereby generate at least one Man-in-the-Browser and/or Man-in-the-Middle and/or Bot attack-indicative signal when said service page code is incompatible with said rendered service page code, - performing an encryption function on said server DOM code by said box server to generate an obfuscated DOM code, and sending said obfuscated DOM code to said Web browser in response to said asynchronous request, - performing a decryption function on said obfuscated DOM code by said service page code, to obtain said server DOM code, - rendering said server DOM code by said Web browser. - generating a request by a Web browser, concerning a Web application residing in a Web server, - sending said request by said Web browser to a box server, which is in signal communication with said Web server, - receiving a server DOM code by said box server, which code has been automatically generated by said Web server according to said request, - sending a service page code by said box server to said Web browser, in response to said request, said service page code comprising an obfuscated and polymorphic javascript code and/or HTML code, - receiving and rendering said service page code by said Web browser,- receiving and processing said javascript code and/or HTML code, by said Web browser, to automatically generate an asynchronous request, such that environment data of said Web browser may be transmitted to said box server and said rendered service page code may be transmitted to said box server, - processing said environment data of said Web browser, by said box server, to identify Internet attacks of the Man-in-the-Browser and/or Man-in-the-Middle and/or Bot attack types, - processing and comparing said rendered service page code and said service page code by an algorithm application residing in said box server, such that at least one code difference may be identified, and processing said rendered service page code to compare it with said service page code, by a comparison function of said algorithm application, to thereby generate at least one Man-in-the-Browser and/or Man-in-the-Middle and/or Bot attack-indicative signal when said service page code is incompatible with said rendered service page code, - performing an encryption function on said server DOM code by said box server to generate an obfuscated DOM code, and sending said obfuscated DOM code to said Web browser in response to said asynchronous request, - performing a decryption function on said obfuscated DOM code by said service page code, to obtain said server DOM code, - rendering said server DOM code by said Web browser.