Clever. The title suggests something special about it being morse code.
The key is that they use javascript to decode the message. In that case they could have used any substitution cypher between characters and puctuation. Or even ASCII art representing a funny picture.
Hackers use Caesar cypher to conceal malicious urls.
I wonder why they would use something so inefficient in this context. Are there phishing scanners that look for more efficient (high-entropy) strings of characters, like base64?