API isn't activated, however wildcard A record added to all of my domains

What is the name of the domain?

hemanshulic.com

What is the issue you’re encountering

API Keys isn’t activated, however wildcard A record added to all of my domains through API

What is the current SSL/TLS setting?

Off

Check your audit log to see how the change was made…
https://dash.cloudflare.com/?to=/:account/audit-log

1 Like

Can you post a screenshot of the error you’re facing??

Screenshot : Screenshot by Lightshot

This changes isn’t done by me.
And interface is showing “API”, that means some one had API Keys of my account to perform such action, however till the date I didn’t any Account API Tokens.

Every account has a global API key, rotate it to a new one…

Change your password and ensure 2FA is set up on your account. Then see if the addition of this records stops.