if they have a website up, try to get in touch with them through any contact info they have there. otherwise, do a whois lookup (whois.net, whois.sc) on the domain and try to get their contact info there. if you're looking to spend hundreds or more on the domain, you should look into an escrow service like escrow.com or through sedo. secure/reputable has it's price!