The domain name is one thing and the provider (where the website lies) is an other.
I take it the website is still up and running (or your friend would not need access) and she most likely paid for the webhosting for the last 20 years.
Contact the provider, telling them she lost access-data.