What's the correct way to refer to the instance? Is it Infosec.Exchange or infosec.exchange?

According to @jerry, either is canonically correct, but Infosec.Exchange (capital I capital E) is preferred, unless the reference exists within the context of a URL/domain name, in which case infosec.exchange is fine.