James Holmes -- Sex Website Says His Profile Is Legit

A profile on a popular sex website appearing to be that of Colorado shooting suspect James Holmes is authentic ... so say sources connected to the website.

As TMZ first reported, the profile appeared on the website adultfriendfinder.com just days before the "Dark Knight Rises" massacre. The profile included a cryptic message on the top which reads, "Will you visit me in prison?"

Sources at the website tell TMZ they have confirmed it was created by Holmes. We're told they tracked the IP address back to Aurora, CO and the account info for the profile (such as the address and DOB) matched up with Holmes.

In the profile, Holmes described his penis as "short/average," said he was a "light/social drinker" and in the section where he's asked if he smokes or does drugs, he answered, "I'd prefer not to say."

Holmes created the profile on July 5 and last logged in to the site sometime in the past three days.

Law enforcement is currently looking at the profile to determine its authenticity and relevance, but website sources tell us ... they have not been contacted yet.