The very ghetto way, if they aren't using privacy protection, is pull the first line of the street address from the WHOIS and then do a Google search for "address (in quotes)" inurl:whois. Duplicates will abound, but generally if they own a portfolio and are consistent on WHOIS details, this will give you some ideas. Often drilling down to the domains you come up with can give you additional leads.
Frank