diff --git a/dns/elasticbeantalk-takeover-detection.yaml b/dns/elasticbeantalk-takeover-detection.yaml
index c5dfc13a46..79aa08e653 100644
--- a/dns/elasticbeantalk-takeover-detection.yaml
+++ b/dns/elasticbeantalk-takeover-detection.yaml
@@ -14,10 +14,10 @@ info:
 # Do not report this without claiming the CNAME.
 #
 # CLI command to verify the availability of the environment:
-# aws elasticbeanstalk check-dns-availability --region {AWS_REGION} --cname-prefix {CNAME_PREFIX} 
+# aws elasticbeanstalk check-dns-availability --region {AWS_REGION} --cname-prefix {CNAME_PREFIX}
 # Example:
 # CNAME - 2rs3c.eu-west-1.elasticbeanstalk.com
-# Command - aws elasticbeanstalk check-dns-availability --region eu-west-1 --cname-prefix 2rs3c 
+# Command - aws elasticbeanstalk check-dns-availability --region eu-west-1 --cname-prefix 2rs3c
 
 dns:
   - name: "{{FQDN}}"
@@ -25,17 +25,21 @@ dns:
     class: inet
     recursion: true
     retries: 3
+
     matchers-condition: and
     matchers:
+
       - type: regex
         name: elasticbeanstalk
         regex:
           # Only CNAMEs with region specification are hijackable.
           - \.(us|af|ap|ca|eu|me|sa)\-(east|west|south|northeast|southeast|central)\-[1-9]+\.elasticbeanstalk\.com
         condition: or
+
       - type: word
         words:
           - "NXDOMAIN"
+
     extractors:
       - type: regex
         group: 1