> They are just trying to “ strong arm” the domain away from you with a threatening letter.

This isn't ok and making them go away isn't good enough. They need to pay for having made that long list of demands and threats, ideally by having their whole business taken away and given to OP.