Is it safe?
Well, it’s certainly not safe enough for me to send my credit card details over this site. Here’s why:
Website is not encrypted and does not allow encryption:
It does not matter that the flight selection site (https://booking.sita.aero/itd/itd/Air) is encrypted, you will afterwards be redirected again to a page for the credit card payment which is again partially unencrypted (verified with a http proxy tool).
A Whois lookup reveals the following:
I suspect that this site is highly susceptible to being hacked (IIS 7.5 has at least one known vulnerability: https://www.exploit-db.com/exploits/15803)
The server located on UAE territory will invariably collect your personal information.
Even though they claim differently:
All credit/debit card transactions are carried out on behalf of Iraqi
Airways (www.ia.com.iq) by Barclays EPDQ Merchant bank PLC (after
ticketing confirmation the user is forwarded to a secure payment
system guaranteed by Barclays EPDQ Merchant bank PLC where the user
may pay for their booking).
Can you print the issued ticket immediately after the purchase?
No. It will be processed first and you likely have to wait up to 24 hrs before you get an email confirmation with the ticket issued.
Solution: Normally in such cases I call the UK office (+44 207 724 8455) and book through the agent, or I use a local travel agent service asking them to book the segments through their direct GDS connection. Last but not least (in case your inquiry is about domestic flights), flying in Iraq used to be cheaper with hard cash (USD) paid upon arrival after some negotiating.