The email is likely not faked because they doubled-down but it shows another area of incompetance. A real cease and desist would likely go through an actual law

The email is likely not faked because they doubled-down but it shows another area of incompetance. A real cease and desist would likely go through an actual lawyer (with relevant contact information to ensure they actually have standing), not a legal@ email address.