Gravar-mail: Botnet cluster identification