Just wait for renewal and snipe it before they renew. I have been able to get several squatted domains this way.