Methods, systems and computer products disclosed herein are directed to an O.C. Engine that detects a first request sent from a requesting account during a target account session, the target account associated with multiple sessions. The O.C. Engine generates a first request parent node active for a range of time. The O.C. Engine detects a subsequent second request sent from the requesting account and generates a second request node. The O.C. Engine verifies that the subsequent second request is not an initial request by the requesting account during a range of time that has not yet expired. Upon verification, the O.C. Engine identifies the second request node as a child node by generating a link between the parent node and the child node.