Plot twist: Joe helped DMF steal his own coins.
All ips use the exact same user-agent of:
Mozilla/5.0%2520(Macintosh;%2520Intel%2520Mac%2520OS%2520X%252010_9_3)%2520AppleWebKit/537.36%2520(KHTML,%2520like%2520Gecko)%2520Chrome/36.0.1985.143%2520Safari/537.36