A few years ago, I bought a domain through a shady registrar. Before it expired, I tried transferring it to another company, but the first company refused to transfer it before it expired. Then they demanded renewal costs before they would release it. I knew I wouldn't need it for a while, so I backordered it through the second company. It's been a couple of years, and the first company still has a hold on it. What actions can I take against them to get my domain back?