I'd also like to know the answer to this question! :)
I love domaintools as it allows to find anything by anything. Like domains (current and historical) by email, or even by fragment of registrant information, such as by phone number or by zip code.