diff --git a/app/api/stream_proxy.py b/app/api/stream_proxy.py
index 32c3f03..4d7ce6f 100644
--- a/app/api/stream_proxy.py
+++ b/app/api/stream_proxy.py
@@ -904,6 +904,19 @@ async def proxy_stream(
                 stream=True,
                 follow_redirects=True,
             )
+        # okcdn (OK.ru, porndupe) odrzuca obcy naglowek Origin kodem 400, a _build_headers
+        # dokleja go zawsze, gdy znamy Referer. Przegladarka przy zwyklym <video> Origin
+        # nie wysyla. Bez tego kazdy zapasowy proxy porndupe konczyl sie 502 (2026-10-02:
+        # ten sam adres z Refererem 206, z Refererem i Originem 400).
+        if upstream.status_code == 400 and "Origin" in headers and method.upper() in ("GET", "HEAD"):
+            await upstream.aclose()
+            headers.pop("Origin", None)
+            log.info("proxy: upstream 400 z Origin, ponawiam bez niego %s", target[:70])
+            upstream = await client.send(
+                client.build_request(method, target, headers=headers),
+                stream=True,
+                follow_redirects=True,
+            )
         if (
             upstream.status_code in _TUBE_REFRESH_STATUSES
             and refetch_url