Not a normal action when opening a new Tab.

Both those domains are part of the CloudFare Network.

Do you have a "new tab" extension installed that modifies the action of the New Tab feature in Firefox? If so, disable that extension and verify that contact to those IP addresses stops.

A list of all my Extensions :

Adblock Plus Bluhell Firewall Enhanced Steam IDM integration LeechBlock MEGA Stylish YouTube High Definition

So i just disabled them all and still same thing happen

Hmm, could be this issue:

By default, Firefox prepares 15 tiles for the new tab page. If Firefox was not able to capture a thumbnail image for a site in a history tile, it may try to do so in the background when you open the new tab page. I haven't heard of that for a download before, but it's worth checking.

To remove that from the page, I can think of two possible approaches:

(1) Remove it from History. You can launch your history in the Library dialog using either:

• Ctrl+Shift+h
• History menu > Show All History

You may be able to search using part of the IP address in the search box in the upper right corner. If you find it, you could right-click > Delete items from that server, or right-click one of the entries and Forget About This Site (removes history, cache, bookmarks, permissions, etc., for that site).

(2) If that doesn't work, you could try to clear suspicious tiles from the new tab page, once it settles down.

Use Ctrl- to zoom out so you can see all 15 tiles, then hover suspicious (e.g., blank, odd sites) tiles and click the "x" button at the upper right corner to block them from appearing on the page.

Does that help?

Thanks, it worked :D it was the following site "www.mobafire.com" it didn't have a thumbnail and when i pinged it got the same IP Address so i cleared the tiles