Look in the logs. In the \Blackberry Enterprise Server\Logs\ folder. There should be a log file called BES_MDAT_*.txt where the star is the date and some other numbers.
Open that in notepad and hit CTRL+F to find and type in the domain name of the bad site from websense. The line that references the domain name should also have the PIN of the device that accessed it.