Given they were threatening the domain owner’s friends, even basic police work would’ve quickly turned it up. Even without police work I’m sure friends or family would’ve volunteered the info.
The entire situation is a hypothetical, so the only thing you can operate with is assumptions.