Can someone please explain what is happening here?

Note: Everything done on testnet so the only value lost was time.

In this first screenshot:

http://i.imgur.com/8WXKdgb.png

it shows that:

1 I am making a payment to mwCwTceJvYV27KXBc3NJZys6CjsgsoeHmf

2 I am sending change to mogwtVo5bDzJRWsVNLEpfDDt5dXHcC2tf5 <- cold wallet address.

The second screenshot shows extra translation fees being calculated:

http://i.imgur.com/yRzxf8v.png

The third screenshot shows the change going to a completely different address, change went to n18wMXVBXoE134AQsd7GcQKnjBah2MsPdD

http://i.imgur.com/564PKIi.png

I have tested this twice, and twice the change went to an address other than the address I specified.

What's going on?