The question is: if she was on her computer, was it before or after her run. If it was before her run, then she was doing homework at the same time as chatting on social media. If it was after her run, it means that she was abducted from house-sitting home.
How can anyone know when she was doing online course homework? Both by looking at computer use and LMS access. How can anyone know where she was doing homework? LMS IP data collection.
It might seem like a tangent, but in some ways it narrows down where she was when she was abducted. My guess at this time is that she did homework at 5:30 and was abducted on the rather rural road near the house-sitting house. Someone could easily have seen her and followed from a distance until she ran one block past the residential homes.