Anyone know why they are doing this? Seems to be wasting fees. Is it just an etherscan bug?
As Ratimov posted link stated. That is for preparation to make you make a mistake if somehow you copy-pasted an address from your history. If you don't copy-paste an address from your transaction history, then you are safe.
So this is like creating an opportunity for the sender to make a mistake and send the amount to the address that is created specifically for this attack.
So to avoid being a victim of this Address Poisoning Attack,
Make sure you don't copy the address from your transaction history.