I think I would try ignoring them for a little while.
It started as a legitimate business/commercial contact. You've given the parties the courtesy of a flat but polite refusal, repeatedly and severally. You don't need to do any more.
If they persist, repeatedly, with essentially the same request, no new or specific matters to put which they might reasonably imagine could warrant or tempt consideration (they, presumably, don't know your company's plans for the domain), then I think it could be classed as abuse.
It could be considered that all of us 'here' have something of a 'hair trigger' when it comes to abuse. Probably best, when it comes to commercial matters and our employers' interests, to err a little on the conservative side just in case we might stray outside the norm and maybe create some sort of liability.
Of course it could be they *do* know (somehow) of the plans for the domain and are trying for some sort of leverage. Can't imagine what that might be, offhand, but in any event badgering you wouldn't help progress it. At the very least it would ensure nobody your end forgets to renew registration.
Does the domain have much SEO value?
http://estibot.com/ etc.
[edit - heh, just checked the value of an abandoned domain from my previous work. When it was active it had a higher $ value (= more recognition) than the company's 'main' domain. I pointed that out to them but they just abandoned it anyway. Looks like some squatter/speculator has grabbed it (but no web page) and its value has dropped to base = $20 in estibot terms. Oh well, what's 'web presence' really worth anyway? More than the cost of renewal and hosting a single web page, I would have thought.]