> Your filters +*.png allows png's from ANYWHERE

OK I think that was part of the confusion.  Because you said that by default
WinHTTrack should not download from other sites, but then by default a
project's settings will have the following Scan Rules:

+*.png +*.gif +*.jpg +*.css +*.js -ad.doubleclick.net/*
-mime:application/foobar

Thanks.