The US Justice Department seized a domain used to steal bank logins, causing $14.6 million in losses from 19 US victims.